CVE-2011-4732

CVE-2011-4732 describes a vulnerability in Parallels Plesk Panel 10.2.0_build1011110331.18 where the Server Administration Panel omits the Content-Type header's charset parameter for specific resources, potentially leading to an interpretation conflict. This issue primarily affects Parallels Plesk Panel on various operating systems including Microsoft Windows and Enterprise Linux distributions. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk. It is a network-based attack with low complexity and no authentication required, allowing for complete compromise of confidentiality, integrity, and availability. However, it's noted that clients, rather than the Plesk product itself, might be the primary affected party. Despite its high severity, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention or exploitation.