Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentication.
The fixed version is included in Eclipse IDE 2024-03
References
Link | Resource |
---|---|
https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 | Patch |
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 | Exploit Issue Tracking Vendor Advisory |
https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 | Patch |
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
03 Feb 2025, 21:16
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-77 | |
References | () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - Patch | |
References | () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 - Exploit, Issue Tracking, Vendor Advisory | |
First Time |
Eclipse target Management
Eclipse |
|
CPE | cpe:2.3:a:eclipse:target_management:*:*:*:*:*:*:*:* |
21 Nov 2024, 08:47
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References | () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - | |
References | () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 - |
26 Apr 2024, 10:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-26 10:15
Updated : 2025-02-03 21:16
NVD link : CVE-2024-0740
Mitre link : CVE-2024-0740
CVE.ORG link : CVE-2024-0740
JSON object : View
Products Affected
eclipse
- target_management