Vulnerability Description
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Meetingplace | 6.1 |
Related Weaknesses (CWE)
References
- http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp6
- http://www.securityfocus.com/bid/53432
- http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp6
- http://www.securityfocus.com/bid/53432
FAQ
What is CVE-2011-4232?
CVE-2011-4232 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate direct...
How severe is CVE-2011-4232?
CVE-2011-4232 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-4232?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Unified Meetingplace.