Beveiligingsadvies

CVE-2011-4740

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-12-16 11:00:00

Laatst bijgewerkt 2024-08-07 00:16:34

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET requests with query strings for smb/app/search-data/catalogId/marketplace and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

← Alle CVE's bekijken Bekijk op cve.org ↗