Lucene search
K

4 matches found

NVD
NVD
added 2011/12/16 11:55 a.m.19 views

CVE-2011-4730

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in...

10CVSS7AI score0.02381EPSS
Exploits0References2
Prion
Prion
added 2011/12/16 11:55 a.m.20 views

Authentication flaw

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in server/google-tool...

9.3CVSS7.6AI score0.02038EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2011/12/16 11:0 a.m.19 views

CVE-2011-4851

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in server/google-tool...

7.1AI score0.02038EPSS
Exploits0References2
CVE
CVE
added 2011/12/16 11:0 a.m.48 views

CVE-2011-4730

The vulnerability CVE-2011-4730 affects Parallels Plesk Panel 10.2.0_build1011110331.18, specifically its Server Administration Panel. The underlying issue is that the password form field is generated without disabling the browser autocomplete feature, which can allow an attacker to bypass authen...

10CVSS7.3AI score0.02381EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder