CVEvulnerability
CVE-2011-4232
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Affected configurations
• cisco unified meetingplace 6.1
• cisco unified meetingplace 8.5
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf www.cisco.com
- http://www.securityfocus.com/bid/53432 www.securityfocus.com
- http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf www.cisco.com
- http://www.securityfocus.com/bid/53432 www.securityfocus.com