Description
VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords.
References
- http://www.springsource.com/security/cve-2011-0527
- 49122 vdb-entry
- 1025923 vdb-entry
- 20110811 CVE-2011-0527: VMware vFabric tc Server password obfuscation bypass mailing-list
- tcserver-jmx-sec-bypass(69156) vdb-entry