Bug 1939630 (CVE-2020-27225)

Summary:	CVE-2020-27225 eclipse: Help Subsystem does not authenticate active help requests
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	akurtako, andjrobins, dbhole, ebaron, eclipse-sig, jerboaa, jjohnstn, lef, mcoufal, patrickm, rgrunber, vkadlcik
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	It was found that the Eclipse Platform does not authenticate requests to the Help subsystem on the local web server. A local attacker could use this vulnerability to disrupt the Eclipse user's session, potentially causing Eclipse to damage or disclose data owned by that user.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-28 05:04:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1939631, 1943466
Bug Blocks:	1939632

Description Pedro Sampaio 2021-03-16 17:33:26 UTC

In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.

References:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=569855

Comment 1 Pedro Sampaio 2021-03-16 17:33:59 UTC

Created eclipse tracking bugs for this issue:

Affects: fedora-all [bug 1939631]