• Inviting everyone who uses WordPress management tools in Plesk
    The Plesk team is conducting a 60-minute research session that includes an interview and a moderated usability test.
    To participate, please use this link .
    Your experience will help shape product decisions and ensure the tools better support real-world use cases.

Security Auditing on Pleak 8.4

F

fatangel

Guest
Hello,

We have a Unix server with Plesk 8.4 installed. We're currently working with SecurityMetrics to tighten the security of a website. Right now, they're complaining about the services on port 8443. Example:

Synopsis : The remote web server uses a version of PHP that is affected by multiple flaws.
Description : According to its banner, the version of PHP installed on the remote host is older
than 5.2.6.

As we understand it, the various services and modules for the Plesk Control Panel (on port 8443) work separately from the services and modules for customer websites (port 80); and thus, the security vulnerabilities of the control panel do NOT affect the security of the customer's website.

However, SecurityMetrics is refusing to listen to the explanation above.

1) Is our understanding of how the server works correct?
2) Can the above be explained in a different manner that will help them understand?
3) Beyond upgrading to Plesk 8.6 are there any other ways to work around the complaints?

thanks,

Ken
 
Back
Top