Don't show version on the login mask.
I recommend to don't show any information about the version of Plesk or other software before the user logged in.
Anonymous
shared this idea
This feature request has only received very few votes over the course of 7 years. Also, there is no urgent technical requirement for it as the previous statement by Plesk mentioned:
-----
You wouldn't need to worry too much on version exposure: 1) should there be any vulnerability discovered, we will fix it for each and every supported version. Just stay up2date 2) hiding version gives only false sense of security - attacker can still apply all known vulnerabilities disregarding your actual version. There were just few vulnerabilities about Plesk and it is easy to run them all (though it won't give an impact as all of them are addressed already). It is even easier than capturing a version from a file. If you remain heavily concerned, we can recommend applying Two-Factor authentication via Clef or Google Auth extensions at http://ext.plesk.com or maybe restricting Plesk control panel access to certain IPs only and only enter it via VPN. The last option is the least convenient and the most secure.
-----
For that reason we are now closing this request.
-- PD
-
NetVicious commented
If all the sysop/admins in the world had their systems updated always the internet will be safer for sure. I think it's not as complicated to remove that, and that's not security by concealing it's only a way to not put things easy to the bad guys.
-
Plesk shows it's version on the html title element on the login screen. This it's a security issue because attackers can see easily which plesk version it's running a site and look for bug of that version.
Another thing it's the login screen should be the same for all the Plesk versions, it's easy to know which major version of plesk it's running a site. Very old versions has different colors, 12 and 11 have a footer with the year and the copyright. This has been improved on Onyx because it don't has any footer, but the html tittle element says directly all.