PT-2024-3486
CVE-2024-0740
·
تاريخ النشر
2024-01-19
·
تاريخ التحديث
2024-04-26
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Eclipse Target Management: Terminal and Remote System Explorer (RSE) versions <= 4.5.400
Description
The issue exists due to the lack of measures to neutralize special elements used in operating system commands. This allows a remote attacker to execute arbitrary code without requiring authentication.
Recommendations
For versions <= 4.5.400, update to a version included in Eclipse IDE 2024-03 or later to resolve the issue.
As a temporary workaround, consider restricting access to the Terminal and Remote System Explorer (RSE) until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾