CVE-2010-1454

Currently unrated

Key Information:

Vendor
Vmware
Status
Tc Server
Vendor
CVE Published:
19 May 2010

Summary

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/58684
vdb-entryx_refsource_XF
http://secunia.com/advisories/39778
third-party-advisoryx_refsource_SECUNIA
http://www.springsource.com/security/cve-2010-1454
x_refsource_CONFIRM

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.