CVE-2020-10689

mediumPriorität · verfolgen · 27OT-Risiko · erhöhtEPSS 0.008 · 55. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.75% (55th) EPSS

CVSS 4.9 · medium

Is it mine?

25 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · bewertet 2026-10-28

A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access to the workspace pods of another user. Successful exploitation requires knowledge of the service name and namespace of the target pod.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobencodeready-workspaces/crw-2-rhel8-operator-metadata@sha256:52d30fcac79fc7bd5fd3e03a253215e7023d422ab72e4661229e9ed09cf9ef27_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/crw-2-rhel8-operator@sha256:45eca3d70335c8b70f5e71d31576d66fba7877d8bd2d5eb96352a1da7b2ef58f_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/devfileregistry-rhel8@sha256:b811a879f331152bada0fd225ca3330d54f27596040edec5778bd4099bc14371_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/imagepuller-rhel8@sha256:da74046d9bc142f22624c2d46da07ec22d5cf4d27b19c898390d0aa4bdce1ec0_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/jwtproxy-rhel8@sha256:b0b31981db52f3203682f18026bcd346cee647d7ad4160e87103f276f8780ff5_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/machineexec-rhel8@sha256:dac0dae1b8df99a74b42a87ad5d2976b5f1f1d864feea953ce92660b9f33ac39_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/plugin-java11-rhel8@sha256:872fa606f0108bbad736bd70d588263437c728ada2ff6790981eff1703fa7a55_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/plugin-kubernetes-rhel8@sha256:603780924977c27ccfbbb1715fd3ef3683eaea5ee867f93d25ed4c9a74514eaa_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/plugin-openshift-rhel8@sha256:38202d1640cf25438ab85e5c7847917daeb0fdca040c2adf4ad8daa018a5f335_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/pluginbroker-artifacts-rhel8@sha256:6e79860a0dd54fadccce26847c0dfb31d74db351e9dfce89df368d655bf27e7a_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/pluginbroker-metadata-rhel8@sha256:27d339688c21a34e5edfe9329bcf9a5bed1230bf322170d410a7fa80ee910593_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/pluginregistry-rhel8@sha256:e8187d1f68bba7f17898e341cd0b89b10c9363e31ed558b0713d2367e2669618_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/server-rhel8@sha256:2d87f9ef09138a692c9a09c2b24ddfa3377cc74501a34c142dafd3e08babd650_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-cpp-rhel8@sha256:191d0fcf5983e2901fd3d92d27af760ab3e9924bbad8dbc7d45dd0103de89480_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-dotnet-rhel8@sha256:9a5ef2fec22979ccaab3574c5fc0761262b165bf0c5ac49d078b2069d84d9f08_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-golang-rhel8@sha256:9e8bfc4dda750dbc82a7dac2583cf8b0ee04cc1525b9178aa0b52dae4bc4bc72_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-java-rhel8@sha256:e73cb6bd61cb5578f3317ffe52dd1be0b460d5b8a3f0cee278070203e422c6aa_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-node-rhel8@sha256:d1a9e5d6d9b5fd7de3342db00fa2ed3b883241eca1182044b22c8d05745c298d_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-php-rhel8@sha256:a291af2f21a28654b30e807c9dba2e5934482f8b99f816c197c87850de0eac33_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/stacks-python-rhel8@sha256:dc545739e4b10098e6b763d621289cac2316a5b9302e52f745ace752636939ef_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/theia-dev-rhel8@sha256:cd2ea2de13f288ff091b29e45c277c6f57fb1256d07089c06a16a0d4844d5ed6_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/theia-endpoint-rhel8@sha256:4a2e07d99330ce24c2c4e722181b3d64aba9905d032f127e9fb7ada1e420eb2b_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475
Behobencodeready-workspaces/theia-rhel8@sha256:815f196dff84e44adfefa1545c113c985a425feae969c68c296222a71040c120_amd64 as a component of Red Hat CodeReady Workspaces Containers 2.0redhat_csaf
To start using CodeReady Workspaces, download and install it using the instructions provided in the Red Hat CodeReady Workspaces Installation Guide linked from the References section.
https://access.redhat.com/errata/RHSA-2020:1475

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04.9mediumAV:A/AC:M/Au:S/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 4.4 · Auswirkung 6.4

v3.16.8mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.9 · Auswirkung 5.9

v3.16.4mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.16.4mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · secalert@redhat.com USAusnutzbarkeit 0.5 · Auswirkung 5.9

v3.16.2mediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.4mediumCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-862USCWE-862US

betroffene Produkte (25)

Betroffene Produkte und Versionsbereiche.

20 von 25 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2020:1475Red Hat Security Advisory: Red Hat CodeReady Workspaces 2.1.0 release2020-04-14csaf · redhat_csafUS
Red Hat CodeReady Workspaces 2.1.0 has been released. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2020-04-03geändert 2026-06-17

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan