Security Advisory

CVE-2011-4740

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-12-16 11:00:00

Last updated 2024-08-07 00:16:34

Assigner mitre

State PUBLISHED

Description

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET requests with query strings for smb/app/search-data/catalogId/marketplace and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a "cross-domain Referer leakage" issue.

← Browse all CVEs View on cve.org ↗