Lucene search

K
cve[email protected]CVE-2024-0740
HistoryApr 26, 2024 - 10:15 a.m.

CVE-2024-0740

2024-04-2610:15:10
CWE-78
web.nvd.nist.gov
37
eclipse
target management
remote system explorer
remote code execution
vulnerability
authentication bypass
fixed version
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.8%

Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentication.

The fixed version is included in Eclipse IDE 2024-03

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Terminal and Remote System Explorer (RSE)"
    ],
    "packageName": "org.eclipse.tm",
    "product": "Eclipse Target Management",
    "repo": "https://git.eclipse.org/r/plugins/gitiles/tm/org.eclipse.tm/",
    "vendor": "Eclipse Foundation",
    "versions": [
      {
        "lessThanOrEqual": "4.5.500",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.8%

Related for CVE-2024-0740