VULNERABILITY INTELLIGENCE
CVE-2011-4232
CVSS score5 MEDIUM
EPSS probability1.16%
CISA KEVNot currently listed
Published2012-05-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor