Lucene search

K
cve[email protected]CVE-2011-4757
HistoryDec 16, 2011 - 11:55 a.m.

CVE-2011-4757

2011-12-1611:55:11
CWE-255
web.nvd.nist.gov
16
parallels plesk
small business panel
cve-2011-4757
authentication bypass
remote attackers
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files.

Affected configurations

NVD
Node
parallelsparallels_plesk_small_business_panelMatch10.2.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

Related for CVE-2011-4757