Directory Enumeration Vulnerability in Cisco Unified MeetingPlace 6.1 and 8.5

Directory Enumeration Vulnerability in Cisco Unified MeetingPlace 6.1 and 8.5

CVE-2011-4232 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.

Learn more about our Cis Benchmark Audit For Cisco.