PT-2011-2423 · Vmware · Vmware Vfabric Tc Server

Publicado 2011-08-15 · Atualizado 2017-08-17 · CVE-2011-0527

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware vFabric tc Server versions 2.0.x through 2.0.5.RELEASE VMware vFabric tc Server versions 2.1.x through 2.1.1.RELEASE

Description The issue allows context-dependent attackers to obtain access more easily by leveraging the ability to read stored passwords, as the software accepts obfuscated passwords during JMX authentication.

Recommendations For versions 2.0.x through 2.0.5.RELEASE, update to version 2.0.6.RELEASE or later. For versions 2.1.x through 2.1.1.RELEASE, update to version 2.1.2.RELEASE or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-0527

Produtos afetados

Vmware Vfabric Tc Server

Referências · 6

• http://springsource.com/security/cve-2011-0527 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69156 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0527 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0122.html · Nota
• http://securitytracker.com/id?1025923 · Nota
• http://securityfocus.com/bid/49122 · Nota