CVE-2020-27225 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-27225 Interim 1 20 2023-09-10T23:46:43Z current 2021-05-30T14:44:48Z 2023-09-10T23:46:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-27225 In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFMJOYKYZTYC75UCIIQQRAD674LFJI3L/ E-Mail link for openSUSE-SU-2021:0485-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Package Hub 15 SP5 openSUSE Leap 15.2 openSUSE Tumbleweed eclipse-contributor-tools-4.15-3.6 eclipse-contributor-tools-4.9.0-4.3.8 eclipse-contributor-tools-4.9.0-lp152.3.3.1 eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 eclipse-contributor-tools-bootstrap-4.9.0-lp152.3.3.1 eclipse-equinox-osgi-4.15-3.6 eclipse-equinox-osgi-4.9.0-4.3.8 eclipse-equinox-osgi-4.9.0-lp152.3.3.1 eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 eclipse-equinox-osgi-bootstrap-4.9.0-lp152.3.3.1 eclipse-jdt-4.15-3.6 eclipse-jdt-4.9.0-lp152.3.3.1 eclipse-jdt-bootstrap-4.9.0-lp152.3.3.1 eclipse-p2-discovery-4.15-3.6 eclipse-p2-discovery-4.9.0-lp152.3.3.1 eclipse-p2-discovery-bootstrap-4.9.0-lp152.3.3.1 eclipse-pde-4.15-3.6 eclipse-pde-4.9.0-4.3.8 eclipse-pde-4.9.0-lp152.3.3.1 eclipse-pde-bootstrap-4.9.0-4.3.8 eclipse-pde-bootstrap-4.9.0-lp152.3.3.1 eclipse-platform-4.15-3.6 eclipse-platform-4.9.0-4.3.8 eclipse-platform-4.9.0-lp152.3.3.1 eclipse-platform-bootstrap-4.9.0-4.3.8 eclipse-platform-bootstrap-4.9.0-lp152.3.3.1 eclipse-swt-4.15-3.6 eclipse-swt-4.9.0-4.3.8 eclipse-swt-4.9.0-lp152.3.3.1 eclipse-swt-bootstrap-4.9.0-4.3.8 eclipse-swt-bootstrap-4.9.0-lp152.3.3.1 eclipse-tests-4.9.0-4.3.8 eclipse-tests-4.9.0-lp152.3.3.1 eclipse-tests-bootstrap-4.9.0-4.3.8 eclipse-tests-bootstrap-4.9.0-lp152.3.3.1 eclipse-contributor-tools-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-equinox-osgi-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-pde-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-pde-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-platform-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-platform-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-swt-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-swt-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-tests-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-tests-bootstrap-4.9.0-4.3.8 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 eclipse-contributor-tools-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-contributor-tools-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-equinox-osgi-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-equinox-osgi-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-jdt-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-jdt-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-p2-discovery-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-p2-discovery-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-pde-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-pde-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-platform-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-platform-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-swt-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-swt-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-tests-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-tests-bootstrap-4.9.0-lp152.3.3.1 as a component of openSUSE Leap 15.2 eclipse-contributor-tools-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-equinox-osgi-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-jdt-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-p2-discovery-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-pde-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-platform-4.15-3.6 as a component of openSUSE Tumbleweed eclipse-swt-4.15-3.6 as a component of openSUSE Tumbleweed In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process. CVE-2020-27225 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-contributor-tools-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-equinox-osgi-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-jdt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-jdt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-p2-discovery-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-p2-discovery-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-pde-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-pde-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-platform-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-platform-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-swt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-swt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-tests-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:eclipse-tests-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-contributor-tools-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-equinox-osgi-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-jdt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-jdt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-p2-discovery-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-p2-discovery-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-pde-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-pde-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-platform-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-platform-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-swt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-swt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-tests-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:eclipse-tests-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-contributor-tools-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-equinox-osgi-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-jdt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-jdt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-p2-discovery-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-p2-discovery-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-pde-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-pde-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-platform-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-platform-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-swt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-swt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-tests-4.9.0-4.3.8 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:eclipse-tests-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-contributor-tools-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-contributor-tools-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-equinox-osgi-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-equinox-osgi-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-pde-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-pde-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-platform-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-platform-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-swt-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-swt-bootstrap-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-tests-4.9.0-4.3.8 SUSE Linux Enterprise Module for Package Hub 15 SP5:eclipse-tests-bootstrap-4.9.0-4.3.8 openSUSE Leap 15.2:eclipse-contributor-tools-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-contributor-tools-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-equinox-osgi-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-equinox-osgi-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-jdt-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-jdt-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-p2-discovery-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-p2-discovery-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-pde-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-pde-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-platform-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-platform-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-swt-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-swt-bootstrap-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-tests-4.9.0-lp152.3.3.1 openSUSE Leap 15.2:eclipse-tests-bootstrap-4.9.0-lp152.3.3.1 openSUSE Tumbleweed:eclipse-contributor-tools-4.15-3.6 openSUSE Tumbleweed:eclipse-equinox-osgi-4.15-3.6 openSUSE Tumbleweed:eclipse-jdt-4.15-3.6 openSUSE Tumbleweed:eclipse-p2-discovery-4.15-3.6 openSUSE Tumbleweed:eclipse-pde-4.15-3.6 openSUSE Tumbleweed:eclipse-platform-4.15-3.6 openSUSE Tumbleweed:eclipse-swt-4.15-3.6 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H