CVE-2020-10689

Katalog CVE

CVSS 6.8 · Medium EPSS 0,75%

Kerentanan Missing Authorization pada eclipse che. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access to the workspace pods of another user. Successful exploitation requires knowledge of the service name and namespace of the target pod.

Rincian

Terbit di NVD

3 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,75% peluang dieksploitasi; lebih tinggi dari 53,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10689 issue tracking · patch · advisory pihak ketiga
• https://github.com/eclipse/che/issues/15651 exploit · issue tracking · advisory pihak ketiga