CVE-2011-4232

{"id": "CVE-2011-4232", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-05-03T10:11:39.733", "references": [{"url": "http://www.cisco.com/en/US/docs/voice_ip_comm/meetingplace/6_1/release_notes/mp61_rn.pdf", "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/53432", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote attackers to enumerate directory names via a series of queries, aka Bug ID CSCtt94070."}, {"lang": "es", "value": "El servidor web en Cisco Unified MeetingPlace v6.1 y v8.5 produce distintas respuestas para las consultas de directorio en funci\u00f3n de si el directorio existe, lo que permite a atacantes remotos enumerar los nombres de los directorios a trav\u00e9s de una serie de consultas, tambi\u00e9n conocido como Bug ID CSCtt94070."}], "lastModified": "2012-05-30T03:40:16.883", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_meetingplace:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EBAE375-3CD0-4749-B446-A79B7C08AE9F"}, {"criteria": "cpe:2.3:a:cisco:unified_meetingplace:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FF3D6AE-38E4-40C7-AD5D-C7DA67AB9DCC"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}