The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directory exists, which allows remote malicious users to enumerate directory names via a series of queries, aka Bug ID CSCtt94070.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco unified meetingplace 8.5 |
||
cisco unified meetingplace 6.1 |