CVE-2011-4232
Last modified
CVE-2011-4232 is a vulnerability of currently unknown severity. The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.. EPSS estimates a 1.17% chance of exploitation in the next 30 days.
Description
The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Meetingplace | 6.1 |
| Cisco | Unified Meetingplace | 8.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-4232?
How severe is CVE-2011-4232?
How do I fix CVE-2011-4232?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-4219Investintech.com SlimPDF Reader does not prevent faulting-ad…
- CVE-2011-4220Investintech.com SlimPDF Reader does not properly restrict t…
- CVE-2011-4221Unspecified vulnerability in Investintech.com Able2Doc and A…
- CVE-2011-4222Unspecified vulnerability in Investintech.com Able2Extract a…
- CVE-2011-4223Unspecified vulnerability in Investintech.com Absolute PDF S…
- CVE-2011-4231Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as a…
- CVE-2011-4237CRLF injection vulnerability in autologin.jsp in Cisco Cisco…
- CVE-2011-4244Heap-based buffer overflow in the RealVideo renderer in Real…
- CVE-2011-4245The RealVideo renderer in RealNetworks RealPlayer before 15.…
- CVE-2011-4246The AAC codec in RealNetworks RealPlayer before 15.0.0 and M…
- CVE-2011-4247RealNetworks RealPlayer before 15.0.0 allows remote attacker…
- CVE-2011-4248RealNetworks RealPlayer before 15.0.0 allows remote attacker…
Are you affected by CVE-2011-4232?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST