CVE-2011-4758 in Plesk Small Business Panel

Riassunto

di MITRE

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 11/12/2011
• Divulgazione: 16/12/2011
• Moderazione: accettato
• Voce: VDB-59738
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01160
• KEV: no
• Attività: molto basso
• Settore: Telecommunication

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4758
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4758
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4758/