Missing authentication for critical function in Eclipse Platform - CVE-2020-27225

Vulnerability identifier: #VU51016

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-27225

CWE-ID: CWE-306

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform unauthorized actions against the application.

The vulnerability exists due to missing authentication when processing Active help requests to the local help web server. A remote non-authenticated attacker can send active help commands to the associated Eclipse platform process or Eclipse Rich Client Platform process.

Successful exploitation of the vulnerability may allow an attacker to read and modify data within the application, create or overwrite files on the system and perform a denial of service attack.

Eclipse Platform
Red Hat Developer Tools
openEuler
rh-eclipse-takari-polyglot (Red Hat package)
rh-eclipse-jakarta-annotations (Red Hat package)
rh-eclipse-batik (Red Hat package)
rh-eclipse-tycho (Red Hat package)
rh-eclipse-apache-sshd (Red Hat package)
rh-eclipse-xmlgraphics-commons (Red Hat package)
rh-eclipse-eclipse-emf (Red Hat package)
eclipse-platform
eclipse-jdt
eclipse-p2-discovery
eclipse-contributor-tools
eclipse-tests
eclipse-debuginfo
eclipse-debugsource
eclipse-swt
eclipse-pde
eclipse-equinox-osgi
eclipse
rh-eclipse-eclipse (Red Hat package)
rh-eclipse (Red Hat package)
rh-eclipse-jgit (Red Hat package)
rh-eclipse-eclipse-egit (Red Hat package)
rh-eclipse-eclipse-jgit (Red Hat package)
rh-eclipse-objectweb-asm (Red Hat package)
rh-eclipse-jetty (Red Hat package)

Install update from vendor's website.

Eclipse Platform - update to 4.19
rh-eclipse-takari-polyglot (Red Hat package) - update to 0.4.6-1.1.el7_9
rh-eclipse-jakarta-annotations (Red Hat package) - update to 1.3.5-7.1.el7_9
rh-eclipse-batik (Red Hat package) - update to 1.14-1.1.el7_9
rh-eclipse-tycho (Red Hat package) - update to 2.2.0-4.1.el7_9
rh-eclipse-apache-sshd (Red Hat package) - update to 2.6.0-1.2.el7_9
rh-eclipse-xmlgraphics-commons (Red Hat package) - update to 2.6-1.1.el7_9
rh-eclipse-eclipse-emf (Red Hat package) - update to 2.25.0-1.1.el7_9
eclipse-platform - update to 4.11-4
eclipse-jdt - update to 4.11-4
eclipse-p2-discovery - update to 4.11-4
eclipse-contributor-tools - update to 4.11-4
eclipse-tests - update to 4.11-4
eclipse-debuginfo - update to 4.11-4
eclipse-debugsource - update to 4.11-4
eclipse-swt - update to 4.11-4
eclipse-pde - update to 4.11-4
eclipse-equinox-osgi - update to 4.11-4
eclipse - update to 4.11-4
rh-eclipse-eclipse (Red Hat package) - update to 4.19-1.3.el7_9
rh-eclipse (Red Hat package) - update to 4.19-4.el7_9
rh-eclipse-jgit (Red Hat package) - update to 5.11.0-1.1.el7_9
rh-eclipse-eclipse-egit (Red Hat package) - update to 5.11.0-1.1.el7_9
rh-eclipse-eclipse-jgit (Red Hat package) - update to 5.11.0-1.1.el7_9
rh-eclipse-objectweb-asm (Red Hat package) - update to 9.1-1.1.el7_9
rh-eclipse-jetty (Red Hat package) - update to 9.4.38-1.1.el7_9

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=569855

• Missing authentication in Eclipse Platform
• Red Hat Developer Tools update for rh-eclipse
• openEuler update for eclipse