{"id":"CVE-2020-27225","aliases":["EUVD-2020-19738","GHSA-9gwg-cvv6-vjxh","MGASA-2021-0591","OESA-2022-1759","RHEA-2021:1441","UBUNTU-CVE-2020-27225","openSUSE-SU-2021:0485-1","openSUSE-SU-2024:10732-1"],"status":"published","title":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate...","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00336,"percentile":0.2728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-306"],"published":"2021-03-09T18:15:16Z","modified":"2026-08-18T01:16:47Z","fixes":[{"ecosystem":"Mageia:8","package":"eclipse","fixed_in":["4.17-8.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"eclipse","fixed_in":["4.11-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"eclipse","fixed_in":["4.11-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"eclipse","fixed_in":["4.11-5.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse","fixed_in":["1:4.19-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-apache-sshd","fixed_in":["1:2.6.0-1.2.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-apache-sshd-javadoc","fixed_in":["1:2.6.0-1.2.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-css","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-demo","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-javadoc","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-rasterizer","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-slideshow","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-squiggle","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-svgpp","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-ttf2svg","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-util","fixed_in":["0:1.14-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-debuginfo","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-egit","fixed_in":["0:5.11.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf","fixed_in":["1:2.25.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-core","fixed_in":["1:2.25.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-runtime","fixed_in":["1:2.25.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-xsd","fixed_in":["1:2.25.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-equinox-osgi","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-jdt","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-jgit","fixed_in":["0:5.11.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-p2-discovery","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-pde","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-platform","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-swt","fixed_in":["1:4.19-1.3.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jakarta-annotations","fixed_in":["0:1.3.5-7.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jakarta-annotations-javadoc","fixed_in":["0:1.3.5-7.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-client","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-continuation","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-http","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-io","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-jaas","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-javadoc","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-jmx","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-security","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-server","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-servlet","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-util","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-util-ajax","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-webapp","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-xml","fixed_in":["0:9.4.38-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jgit","fixed_in":["0:5.11.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jgit-javadoc","fixed_in":["0:5.11.0-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-objectweb-asm","fixed_in":["0:9.1-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-objectweb-asm-javadoc","fixed_in":["0:9.1-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-runtime","fixed_in":["1:4.19-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-scldevel","fixed_in":["1:4.19-4.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-atom","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-common","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-javadoc","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-maven-plugin","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-translate-plugin","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-xml","fixed_in":["0:0.4.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-tycho","fixed_in":["0:2.2.0-4.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-tycho-javadoc","fixed_in":["0:2.2.0-4.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-xmlgraphics-commons","fixed_in":["0:2.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-xmlgraphics-commons-javadoc","fixed_in":["0:2.6-1.1.el7_9"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"eclipse","fixed_in":["4.9.0-lp152.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"eclipse-bootstrap","fixed_in":["4.9.0-lp152.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:8","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-8.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11-5.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-apache-sshd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.0-1.2.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-apache-sshd-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.0-1.2.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-css","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-rasterizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-slideshow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-squiggle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-svgpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-ttf2svg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-batik-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-egit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-emf-xsd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-equinox-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-jdt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-p2-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-pde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-platform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-eclipse-swt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-1.3.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jakarta-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-7.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jakarta-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-7.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-continuation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-jaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-servlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-util-ajax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jetty-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.38-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jgit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-jgit-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.11.0-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.1-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-objectweb-asm-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.1-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.19-4.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-atom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-translate-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-takari-polyglot-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-tycho","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-tycho-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-4.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-xmlgraphics-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"rh-eclipse-xmlgraphics-commons-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-1.1.el7_9"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.1-8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.1-10","3.8.1-11"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-lp152.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"eclipse-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-lp152.3.3.1"}]}]}],"products":[{"vendor":"eclipse","product":"platform"},{"vendor":"the eclipse foundation","product":"eclipse platform"}],"references":[{"url":"https://bugs.eclipse.org/bugs/show_bug.cgi?id=569855","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27225","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9gwg-cvv6-vjxh"},{"url":"https://advisories.mageia.org/MGASA-2021-0591.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29048","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GFMJOYKYZTYC75UCIIQQRAD674LFJI3L/","tags":["web","advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1759","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHEA-2021:1441","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_eclipse_4.19/","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHECLIPSE-346","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhea-2021_1441.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939630","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27225","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2020-27225","tags":["report"]},{"url":"https://bugzilla.suse.com/1183728","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27225","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-27225","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","status":"published","published":"2021-03-09T18:15:16Z","modified":"2024-08-04T16:11:36.031Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:53.236501Z"}],"euvd":[{"id":"EUVD-2020-19738","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","status":"published","published":"2021-03-09T18:15:16Z","modified":"2024-08-04T16:11:36Z","updated_at":"2026-11-03T03:07:13.515696Z"}],"ghsa":[{"id":"GHSA-9gwg-cvv6-vjxh","title":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate...","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","status":"published","published":"2022-05-24T17:43:51Z","modified":"2023-01-29T05:06:45Z","cwes":["CWE-306"],"updated_at":"2026-11-02T14:46:05.419939Z"}],"nvd":[{"id":"CVE-2020-27225","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","status":"published","published":"2021-03-09T19:15:12.237Z","modified":"2026-06-17T03:09:00.423Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"OESA-2022-1759","title":"eclipse security update","description":"The Eclipse platform is designed for building integrated development environments (IDEs), server-side applications, desktop applications, and everything in between.\r\n\r\nSecurity Fix(es):\r\n\r\nIn versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.(CVE-2020-27225)","status":"published","published":"2022-07-22T11:05:01Z","modified":"2026-08-18T01:16:47.597997257Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHEA-2021:1441","title":"Red Hat Enhancement Advisory: rh-eclipse bug fix and enhancement update","status":"published","published":"2024-09-14T00:40:25Z","modified":"2026-02-26T10:03:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2020-27225","description":"In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.","status":"published","published":"2021-03-09T19:15:00Z","modified":"2025-10-24T04:48:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"MGASA-2021-0591","title":"Updated eclipse packages fix security vulnerability","description":"Authenticate active help requests to the local help web server\n(CVE-2020-27225)\n","status":"published","published":"2021-12-30T16:41:51Z","modified":"2026-04-16T04:43:12.137598484Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:0485-1","title":"Security update for eclipse","description":"This update for eclipse fixes the following issues:\n\n-  CVE-2020-27225: Authenticate active help requests to the local help web server (bsc#1183728).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-03-30T01:21:41Z","modified":"2026-02-04T02:14:43.881967Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10732-1","title":"eclipse-contributor-tools-4.15-3.6 on GA media","description":"These are all security issues fixed in the eclipse-contributor-tools-4.15-3.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:52:35.691829Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}