1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Concern about alias of other hosted account.

Discussion in 'Plesk 10.x for Linux Suggestions and Feedback' started by AlexisS, Sep 22, 2011.

  1. AlexisS

    AlexisS Guest

    0
     
    Hi,

    I'm concerned about an operation I was able to perform inside Plesk 10.

    I've set up two different account. One we'll call plane.com, the other shoe.com
    Both accounts are owned by different users ("Customers inside Plesk")

    On my shoe.com Control Panel, inside Aliases, I've entered small.plane.com
    And it worked ! Now if I visit the URL small.plane.com (That the user has normally no right to it) I see the content hosted inside the normal shoe.com account.

    How is that possible ? That's a major fail for the security of all account.
    Is that evitable ?

    Regards,
     
Loading...