• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Major Security issue - urgent

IanT

Basic Pleskian
Hello,

I have just upgraded from plesk 9.5.2 to latest 10.

All users could not login after this is so i disabled the islocked field in smb_users by changing it from 1 to 0.

This allowed the users to login but now when they do and click on users they can see all email accounts belonging to different customers. Also they can see all domains when clicking on account.

Something major wrong here.

Another issue is Horde is throwing up Fast CGI error 500 and will not open.

Please can anyone help?

thanks

Ian
 
Now it is correct behaviour when users inside subscriber can see all domains of this subscriber and all email addresses. Most probably later users right will be limited by subscription.
 
No. Users from "Users" tab of subscription Control Panel.
 
Back
Top