CVE-2011-4232

2012-05-0310:11:39

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

67.9%

JSON

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.

Affected configurations

Nvd

Node

ciscounified_meetingplaceMatch6.1

ciscounified_meetingplaceMatch8.5

VendorProductVersionCPE
ciscounified_meetingplace6.1cpe:2.3:a:cisco:unified_meetingplace:6.1:*:*:*:*:*:*:*
ciscounified_meetingplace8.5cpe:2.3:a:cisco:unified_meetingplace:8.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_meetingplace	6.1	cpe:2.3:a:cisco:unified_meetingplace:6.1:::::::*
cisco	unified_meetingplace	8.5	cpe:2.3:a:cisco:unified_meetingplace:8.5:::::::*