CVE-2011-4729

CVE-2011-4729 describes a vulnerability in Parallels Plesk Panel 10.2.0_build1011110331.18, where the Server Administration Panel fails to include the HTTPOnly flag for certain cookies, making them susceptible to script access. This flaw primarily affects Parallels Plesk Panel on various operating systems including Microsoft Windows, Red Hat Enterprise Linux, and Parallels Enterprise Linux. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity and no authentication required, potentially leading to partial confidentiality impact by allowing remote attackers to obtain sensitive information from cookies. While the EPSS score is very low (0.0025), suggesting a low probability of exploitation, the FAUCET Risk Score is 16/100. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.