The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by admin/home/admin and certain other files.
2011-12-16T11:55:09.627
2025-04-11T00:51:21.963
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:P/I:N/A:N
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | parallels | parallels_plesk_panel | 10.2.0_build1011110331.18 | Yes |
Operating System | microsoft | windows | * | No |
Operating System | redhat | enterprise_linux | 6.0 | No |