CVE-2011-4232

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2012-05-03

Last modified

2024-08-07

Weaknesses

CWE-200

Affected products

• Unified Meetingplace (Cisco)

References

• http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf
• http://www.securityfocus.com/bid/53432