CVE-2011-4728: Parallels Plesk Panel

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by login_up.php3 and certain other files.

Affected products

• Parallels Parallels Plesk Panel: version 10.2.0_build1011110331.18 only

Published 2011-12-16. Last modified 2026-06-16.