Auth bypass in VMware Tc Server

CVE-2011-0527

VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords.

Vulnerability class: Broken Authentication

EPSS: 0.016 (72.7th percentile) — read the EPSS interpretation.