CVE:CVE-2010-1454
CNNVD:CNNVD-201005-251
SpringSource tc Server是一款轻型的应用服务器。
VMware SpringSource tc Server Runtime的com.springsource.tcserver.serviceability.rmi.JmxSocketListener没有强制要求对(即s2enc)密码进行加密，远程攻击者可以通过空密码获取JMX接口的访问权限。
solution:Upgrade vmware tc_server to a higher version than 6.0.19,6.0.19.a,6.0.20,6.0.20.a,6.0.20.b,6.0.20.c,6.0.25.a,and avoid the version 6.0.19,6.0.19.a,6.0.20,6.0.20.a,6.0.20.b,6.0.20.c,6.0.25.a