CVE-2021-45008

2022-02-2111:12:50

mitre

github.com

plesk cms

18.0.37

insecure permissions

privilege escalation

vendor statement

site-specific problem

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights. OTE: the vendor states that this is only a site-specific problem on websites of one or more Plesk users

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:plesk:plesk:18.0.37:-:*:*:*:*:*:*"
    ],
    "vendor": "plesk",
    "product": "plesk",
    "versions": [
      {
        "status": "affected",
        "version": "18.0.37"
      }
    ],
    "defaultStatus": "unknown"
  }
]