• The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Issue MAJOR; clients exceed sub notification has other clients info

T

TomBoB

Silver Pleskian
Client notified me.

clients who's subscription exceed the allocated server space (they're allowed to) receive the notification that they exceed their allocation.

Only the data in that mail has the information of another client who's also exceeded their allocation on it !
This is a MAJOR breach of client confidentiality !!

Am still investigating.
Have confirmed it for two clients so far.
Did not happen before the upgrade of 17.8 to Obsidian.
 
TomBoB said:
Client notified me.

clients who's subscription exceed the allocated server space (they're allowed to) receive the notification that they exceed their allocation.

Only the data in that mail has the information of another client who's also exceeded their allocation on it !
This is a MAJOR breach of client confidentiality !!

Am still investigating.
Have confirmed it for two clients so far.
Did not happen before the upgrade of 17.8 to Obsidian.
Click to expand...
@TomBoB @occinodo

I suggest to report this as a bug , that way the developers can fix this
 
Thank you for the report. The issue confirmed and registered using id #PPP-44526. It will be fixed in the nearest update.
 
You must log in or register to reply here.

Similar threads

P
Issue False positives in Imunify notifications received hours after "outdated" software has already been auto-updated
Replies
0
Views
7K
pleskuser67553
P
K
Forwarded to devs Plesk tries to get server hostname from /etc/mailname for cronjob notifications on RHEL based systems
Replies
1
Views
3K
yspirin
Y
O
Issue Incoming Zoho Campaigns emails fail DKIM: psa-pc-remote removes a space from a folded Content-Type header
Replies
9
Views
1K
ollosolucions
O
Z
Resolved Bug report: Watchdog disk threshold alert email contains literal placeholders instead of values
Replies
11
Views
17K
Zenon
Z
T
Forwarded to devs overusage Notification - sent on wrong value (specific conditions)
Replies
11
Views
8K
Sebahat.hadzhi
Sebahat.hadzhi
Back
Top