NVD

Id
11179  
Name
CVE-2011-4849  
Description
The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php and certain other files.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-12-16  
Modified Date
2012-02-01  
Seq
2011-4849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61917 11179 CVE-2011-4849 ppp-cp-secureflag-weak-security(72224)  View
61918 11179 CVE-2011-4849 http://xss.cx/kb/parallels/xss-parallelspleskpanel.v10.4.4_build20111103.18-os_windows-2003-2008-reflected-cross-site-scripting-cwe79-capec86-javascript-injection-example-poc-report.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33219 JVNDB-2011-003459 Parallels Plesk Panel の Control Panel における Cookie をキャプチャされる脆弱性 Parallels Plesk Panel の Control Panel は、https セッション内に Cookie への secure フラグを設定しないため、Cookie をキャプチャされる脆弱性が存在します。 CVE-2011-4849 52756 CVE-2011-4849 11179 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003459.html 2011-12-16 2011-12-20 View