• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Concern about alias of other hosted account.

A

AlexisS

Guest
Hi,

I'm concerned about an operation I was able to perform inside Plesk 10.

I've set up two different account. One we'll call plane.com, the other shoe.com
Both accounts are owned by different users ("Customers inside Plesk")

On my shoe.com Control Panel, inside Aliases, I've entered small.plane.com
And it worked ! Now if I visit the URL small.plane.com (That the user has normally no right to it) I see the content hosted inside the normal shoe.com account.

How is that possible ? That's a major fail for the security of all account.
Is that evitable ?

Regards,
 
You must log in or register to reply here.

Similar threads

Hangover2
Forwarded to devs Disabled PHP "Hosting performance settings management" can be bypassed by using .user.ini or ini_set()
Replies
9
Views
3K
Sebahat.hadzhi
Sebahat.hadzhi
H
Question SSH user can see other subdomain directories even with chrooted shell?
Replies
3
Views
563
Raul A.
R
C
Question Strange SNI (?) issue related to IPv6 (?)
Replies
2
Views
2K
Carbon Dioxide
C
B
Issue High latency, unreliable performance & 522 errors on a Plesk server that ran fine for 6+ months
Replies
8
Views
2K
HHawk
HHawk
K
Question Error message during Plesk Updates “Warning: install PAM module not successed” (PAMConfig.confset.PAMServiceError: system-auth)
Replies
2
Views
2K
johnrdorazio
J
Back
Top