CVE-2011-4855 Other in n/a

Critical 9.3 Published 16 Dec 2011 Updated 7 Aug 2024

Missing charset header in Plesk Control Panel may cause interpretation conflicts, potentially affecting clients rather than the server itself.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2011-4855?

CVE-2011-4855 is a critical vulnerability in n/a, published on 16 Dec 2011. It can be exploited over the network.

Official description

The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/customer-service-plan/list/reset-search/true/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.

Which versions are affected by CVE-2011-4855?

It affects 1 product.

Products include Parallels Parallels Plesk Panel.

How do I fix CVE-2011-4855?

No fix has been published for CVE-2011-4855 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-4855 being exploited?

There is no known exploitation of CVE-2011-4855 in the wild and no public exploit code.

Sources

Also known as GHSA-c2qw-7x7v-hp58.