NetSight
critical10.0

CVE-2011-4757

Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attack…

Impact

Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files.

Affected products

VendorProductAffected versions
ParallelsParallels Plesk Small Business Panel
Version 10.2.0

Weakness classification

References