CVE-2011-4232

MEDIUM 5.0CVE-2011-4232 · Published 03/05/2012 · updated 16/06/2026

In short

CVE-2011-4232 is a MEDIUM (CVSS 5.0) vulnerability affecting unified meetingplace (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unified meetingplace cisco	`= 6.1= 8.5`	No fix yet

Description

The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.

References

cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf
securityfocus.com/bid/53432

More vulnerabilities in unified meetingplace

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free