Vulnerability in Parallels Plesk Small Business Panel

CVE-2011-4758

Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (63.9th percentile) — read the EPSS interpretation.

Affected products

Parallels Parallels_plesk_small_business_panel — versions 10.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC)