CVE-2011-4739
Parallels Plesk Panel 10.2.0 build 20110407.20 - Authentication Bypass via Autocomplete Feature
Title source: llmDescription
The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/my-profile and certain other files.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72320
Scores
EPSS
0.0238
EPSS Percentile
82.1%
Details
CWE
CWE-255
Status
published
Products (1)
parallels/parallels_plesk_panel
10.2.0_build20110407.20
Published
Dec 16, 2011
Tracked Since
Feb 18, 2026