Eclipse.Equinoxe.OSGi.Console.Remote.Command.Execution

Description

This indicates an attack attempt to exploit a Remote Command Injection vulnerability in Eclipse Equinoxe OSGi (Open Service Gateway initiative) console.
The vulnerability is due to improper validation of client supplied request. A remote attacker may be able to exploit this to execute arbitrary command within the context of the process, via a crafted request.

Affected Products

Eclipse Equinoxe OSGi (Open Service Gateway initiative) console

Impact

System Compromise: Remote attackers can execute arbitrary command execution under the security context of the root user.

Recommended Actions

We currently are not aware of any vendor supplied patches for this issue.

References