Description
Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.
Remediation
References
Related Vulnerabilities
WordPress Plugin Product Catalog Arbitrary File Upload (3.1.1)
WordPress Plugin Wholesale Market for WooCommerce Directory Traversal (1.0.8)
WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7)
Jenkins Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1999044)