NVD

Id
11078  
Name
CVE-2011-4728  
Description
The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-12-16  
Modified Date
2012-02-16  
Seq
2011-4728  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61662 11078 CVE-2011-4728 plesk-flag-info-disclosure(72331)  View
61663 11078 CVE-2011-4728 http://xss.cx/examples/plesk-reports/plesk-redhat-el6-psa-10.2.0-build-1011110331.18-xss-sqli-cwe79-cwe89-javascript-injection-exception-example-poc-report-paros-burp-suite-pro-1.4.1.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33178 JVNDB-2011-003418 Parallels Plesk Panel の Server Administration Panel における Cookie をキャプチャされる脆弱性 Parallels Plesk Panel の Server Administration Panel は、https セッション内に Cookie への secure フラグを設定しないため、Cookie をキャプチャされる脆弱性が存在します。 CVE-2011-4728 52635 CVE-2011-4728 11078 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003418.html 2011-12-16 2011-12-19 View