CVE-2020-27225CWE-306

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an…

published March 9, 2021

CVSS
—
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2021-03-09T18:15Z
EPSS history
Timeline
  • 09 MAR 18:15Z
    In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an…
    cvelistv5