Vulnerability in Parallels Plesk Panel

CVE-2013-0133

Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.

EPSS: 0.004 (32.2th percentile) — read the EPSS interpretation.

Affected products

Parallels Parallels_plesk_panel — versions 11.0.9
N/a — versions n/a

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)