CVE-2011-0527

Vmware TC Server - Authentication Bypass

Title source: rule

Description

VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords.

References (5)

[Third Party Advisory] http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0122.html

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1025923

[Vendor Advisory] http://www.springsource.com/security/cve-2011-0527

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/69156

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/49122

Scores

EPSS 0.0018

EPSS Percentile 39.8%

Classification

CWE

CWE-287

Status draft

Affected Products (13)

vmware/tc_server

Timeline

Published Aug 15, 2011

Tracked Since Feb 18, 2026