CVE-2011-4730

CVE-2011-4730 describes a critical vulnerability in Parallels Plesk Panel 10.2.0_build1011110331.18, affecting installations on Microsoft, Parallels, and Red Hat Enterprise Linux and Windows platforms. The flaw stems from the Server Administration Panel's failure to disable the autocomplete feature on password form fields, specifically in admin/reseller/login-info/ and other files. This allows remote attackers to bypass authentication on unattended workstations, posing a significant security risk. The vulnerability carries a CVSS score of 10.0, indicating a critical severity. Its attack vector is network-based with low complexity and no authentication required, allowing for complete compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. Despite its critical severity, there is no evidence of active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of widespread attention or active exploitation at present.