PT-2011-2423 · Vmware · Vmware Vfabric Tc Server

Published 2011-08-15 · Updated 2017-08-17 · CVE-2011-0527

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VMware vFabric tc Server versions 2.0.x through 2.0.5.RELEASE VMware vFabric tc Server versions 2.1.x through 2.1.1.RELEASE

Description The issue allows context-dependent attackers to obtain access more easily by leveraging the ability to read stored passwords, as the software accepts obfuscated passwords during JMX authentication.

Recommendations For versions 2.0.x through 2.0.5.RELEASE, update to version 2.0.6.RELEASE or later. For versions 2.1.x through 2.1.1.RELEASE, update to version 2.1.2.RELEASE or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-0527

Affected Products

Vmware Vfabric Tc Server

References · 6

• http://springsource.com/security/cve-2011-0527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0527 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69156 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0122.html · Note
• http://securitytracker.com/id?1025923 · Note
• http://securityfocus.com/bid/49122 · Note