Lucene search
MitreCVE-2011-4849HistoryDec 16, 2011 - 11:55 a.m.
CVE-2011-4849
2011-12-1611:55:12
CWE-200
mitre
web.nvd.nist.gov
20
cve-2011-4849
parallels
plesk panel
cookie security
https
remote attack
vulnerability
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
69.7%
The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php and certain other files.
Affected configurations
Node
parallelsparallels_plesk_panelMatch10.4.4_build20111103.18
microsoftwindows_2003_server
ORmicrosoftwindows_server_2008Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| parallels | parallels_plesk_panel | 10.4.4_build20111103.18 | cpe:2.3:a:parallels:parallels_plesk_panel:10.4.4_build20111103.18:*:*:*:*:*:*:* |
| microsoft | windows_2003_server | * | cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2011-12-16 11:55:00
nvd
nvd
CVE-2011-4849
2011-12-16 11:55:12
cvelist
cvelist
CVE-2011-4849
2011-12-16 11:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
69.7%
Related for CVE-2011-4849