Language:
http://www.nessus.org/u?75b56228
http://www.nessus.org/u?b7b1481e
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/errata/RHSA-2020:5168
深刻度: High
ID: 143213
ファイル名: redhat-RHSA-2020-5168.nasl
バージョン: 1.11
タイプ: local
エージェント: unix
公開日: 2020/11/24
更新日: 2024/6/3
サポートされているセンサー: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
リスクファクター: High
スコア: 7.4
リスクファクター: Medium
基本値: 4.4
現状値: 3.4
ベクトル: CVSS2#AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS スコアのソース: CVE-2020-27216
リスクファクター: High
基本値: 7
現状値: 6.3
ベクトル: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
現状ベクトル: CVSS:3.0/E:P/RL:O/RC:C
CPE: p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-indexer-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-common, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlrpc-server, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-packaging, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-license2, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jna, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jgit-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-junit5-guide, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-m2e-workspace-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-emf, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-translate-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-log4j, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-bcel, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-ffi, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sat4j, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-rasterizer, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xml-maven-plugin-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-jgit, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-xml, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-xml, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-tycho, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-indexer, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-backward-codecs, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-xz, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-suggest, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xml-maven-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-jaas, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sequence-library-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-swt, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-opentest4j-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-common, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-antlr32-maven-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-svgpp, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-resolver, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-sandbox, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-commons-logging, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-junit, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jffi-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-oro, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle-pkix, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlrpc-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-jsch, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ws-commons-util, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-ecf-runtime, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ed25519-java, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-apiguardian-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-tycho-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-webtools-sourceediting, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-analyzers-smartcn, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-decentxml, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-ecf-core, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-grouping, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-os-maven-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jzlib-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-runtime, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-slideshow, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-demo, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sequence-library, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-scr, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jgit, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-continuation, cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-jdepend, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-javamail, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-runtime-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-posix-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-classification, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-connector-factory, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-emf-core, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-opentest4j, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-manual, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-maven-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-antlr, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sqljet-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-cbi-plugins, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-emf-xsd, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-queries, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-cbi-plugins-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlgraphics-commons-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-platform, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-webtools-common, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlrpc-common, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-javaewah, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlrpc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-squiggle, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-plugin, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-x86asm-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-jsch, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-args4j-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-antlr32-tool, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ecj, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-mpc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-commons-net, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-monitor, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-apiguardian, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-univocity-parsers-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-emf-sdk, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jctools, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-antlr32-java, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-pde, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-webtools, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jchardet-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-gef-sdk, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-servlet, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-server, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-ttf2svg, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-antlr32-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jffi, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-javaewah-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-bsf, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-swing, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-jdt, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-os-maven-plugin-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-shell-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-constants, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-objectweb-asm-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jzlib, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-junit5, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-core, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle-pg, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-subclipse, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-netdb, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-objectweb-asm, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-gef, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-webapp, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-equinox-osgi, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-args4j, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-m2e-workspace, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-join, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jctools-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-netty, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-emf-runtime, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-imageio, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-apache-sshd, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jffi-native, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-trilead-ssh2, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-highlighter, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-util, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-runtime, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlgraphics-commons, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-egit, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-license1, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-pydev, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-codecs, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-command, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-memory, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-xalan2, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-svnkit-cli, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jzlib-demo, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-takari-polyglot-atom, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-m2e-core, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jna-contrib, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-javaparser-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-posix, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-analysis, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-svnkit, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-apache-sshd-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-x86asm, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-scr-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-junit5, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-stringtemplate, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-shell, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-usocket-jna, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-descriptor, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-sshagent, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jython-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-lib, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-testutil, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-junit5-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-io, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-p2-discovery, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-xmlrpc-client, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-util, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-command-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-jmx, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-univocity-parsers, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-netdb-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-stringtemplate-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-css, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jna-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-misc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sqljet, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle-tls, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-client, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-felix-gogo-parent, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-svnkit-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-trilead-ssh2-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ws-commons-util-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-svnkit-javahl, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-pageant, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-antlr32, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sac, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-maven-archetype-catalog, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-security, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-args4j-parent, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jsch-agent-proxy-usocket-nc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jython-demo, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-sac-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-license, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-jmf, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-ffi-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-decentxml-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-webtools-servertools, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jetty-http, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-batik-javadoc, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-ant-apache-regexp, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-trilead-ssh2, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-javaparser, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-contributor-tools, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jchardet, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-ecf-sdk, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jython, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-scldevel, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-bouncycastle-mail, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-eclipse-ecf, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-lucene-queryparser, p-cpe:/a:redhat:enterprise_linux:rh-eclipse-jnr-constants-javadoc
必要な KB アイテム: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
エクスプロイトが利用可能: true
エクスプロイトの容易さ: Exploits are available
パッチ公開日: 2020/11/23
脆弱性公開日: 2020/10/23
CVE: CVE-2020-27216