PT-2011-5076

CVE-2011-4746

·

Published

2011-12-16

·

Updated

2019-04-22

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.3.1 build1013110726.09
Description The issue concerns the billing system of Parallels Plesk Panel, which fails to disable the SSL 2.0 protocol. This oversight allows remote attackers to exploit weaknesses in the protocol, making it easier to conduct spoofing attacks.
Recommendations For Parallels Plesk Panel version 10.3.1 build1013110726.09, consider disabling the SSL 2.0 protocol to prevent exploitation. As a temporary workaround, restrict access to the billing system until a more permanent solution is available.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾