Description
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebPros | Plesk | < 18.0.80.1 | 18.0.80.1 |