Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5j55-wx7w-qc49

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.

EPSS

Процентиль: 67%
0.0055
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 15 лет назад

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01, does not properly enforce the requirement for an encrypted (aka s2enc) password, which allows remote attackers to obtain JMX interface access via a blank password.

EPSS

Процентиль: 67%
0.0055
Низкий

Дефекты

CWE-287