VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Apr 3, 2020· Updated Jun 17, 2026

CVE-2020-10689

CVE-2020-10689

Description

A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access to the workspace pods of another user. Successful exploitation requires knowledge of the service name and namespace of the target pod.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Eclipse/Che2 versions
    cpe:2.3:a:eclipse:che:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:eclipse:che:*:*:*:*:*:*:*:*range: <7.9.0
    • (no CPE)range: <=7.8.x
  • Red Hat/Eclipse Chev5
    Range: 7.8.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.