Information disclosure in Cisco Unified_meetingplace

CVE-2011-4232

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka…

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_meetingplace — versions 6.1, 8.5
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CONFIRM)