Lucene search
HistoryMay 03, 2012 - 10:11 a.m.
CVE-2011-4232
cisco
unified meetingplace
web server
directory enumeration
vulnerability
cve-2011-4232
nvd
bug id csctt94070
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
67.8%
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Affected configurations
Node
ciscounified_meetingplaceMatch6.1
ORciscounified_meetingplaceMatch8.5
Related
nvd
nvd
CVE-2011-4232
2012-05-03 10:11:39
prion
prion
Directory traversal
2012-05-03 10:11:00
cisco
cisco
cvelist
cvelist
CVE-2011-4232
2012-05-03 10:00:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
67.8%
Related for CVE-2011-4232