Read the docs
TI-2020-08592 Aliases CVE-2020-10689GHSA-p4ff-2hpq-9x64

Missing authorization in Red Hat Eclipse Che

Priority LOW 31CWE-862Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-862.

Summary

A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access to the workspace pods of another user. Successful exploitation requires knowledge of the service name and namespace of the target pod.

Why it matters now

EPSS 0.00752 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatEclipse Che7.8.x—No fix listedCNA
  • Eclipse Che VendorRed Hat Affected 7.8.x Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:eclipse:che:*:*:*:*:*:*:*:*before 7.9.0VulnerableEclipse Foundation
  • cpe:2.3:a:eclipse:che:*:*:*:*:*:*:*:* Versions before 7.9.0 Vulnerable ·Eclipse Foundation

Remediation

Red Hat 1 advisory

  • RHSA-2020:1475 Released 2020-04-14 · Red Hat rating Moderate
    Red Hat CodeReady Workspaces 2.1.0 release
    • Red Hat CodeReady Workspaces Containers 2.0 codeready-workspaces/crw-2-rhel8-operator, codeready-workspaces/crw-2-rhel8-operator-metadata, codeready-workspaces/devfileregistry-rhel8 +20

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Workspaces Containers 2.0Fixed RHSA-2020:1475

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10689
  2. 2026-10-03 Alias added: GHSA-p4ff-2hpq-9x64

References

Exploit 1

Patch 1

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences