CVE-2011-0527: VMware Tc Server

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during JMX authentication, which makes it easier for context-dependent attackers to obtain access by leveraging an ability to read stored passwords.

Affected products

• VMware Tc Server: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2011-08-15. Last modified 2026-06-16.