CVE-2024-0740

Eclipse Target Management: Terminal and Remote System Explorer (RSE) version <= 4.5.400 has a remote code execution vulnerability that does not require authentication. The fixed version is included in Eclipse IDE 2024-03
Configurations

Configuration 1 (hide)

cpe:2.3:a:eclipse:target_management:*:*:*:*:*:*:*:*

History

03 Feb 2025, 21:16

Type Values Removed Values Added
CWE CWE-77
References () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - Patch
References () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 - () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 - Exploit, Issue Tracking, Vendor Advisory
First Time Eclipse target Management
Eclipse
CPE cpe:2.3:a:eclipse:target_management:*:*:*:*:*:*:*:*

21 Nov 2024, 08:47

Type Values Removed Values Added
Summary
  • (es) Eclipse Target Management: Terminal and Remote System Explorer (RSE) versión &lt;= 4.5.400 tiene una vulnerabilidad de ejecución remota de código que no requiere autenticación. La versión fija está incluida en Eclipse IDE 2024-03
References () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 - () https://git.eclipse.org/r/c/tm/org.eclipse.tm/+/202145 -
References () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 - () https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/171 -

26 Apr 2024, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-26 10:15

Updated : 2025-02-03 21:16


NVD link : CVE-2024-0740

Mitre link : CVE-2024-0740

CVE.ORG link : CVE-2024-0740


JSON object : View

Products Affected

eclipse

  • target_management
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')