GitHub Advisoryadvisory · Maven

GHSA-vxhj-3x7p-jxp5 Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy

MEDIUM Published 2022-05-17 Modified 2022-07-06 Official page ↗
Aliases
CVE-2016-6345
Ecosystem
Maven
Packages
org.jboss.resteasy:resteasy-client
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2022-07-06

Affected packages

• Maven org.jboss.resteasy:resteasy-client: < 3.0.20.Final → fixed in 3.0.20.Final • Maven org.jboss.resteasy:resteasy-client: >= 3.1.0.Beta1, < 3.1.0.CR1 → fixed in 3.1.0.CR1

Description

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.

Related

Alias · CVE (1)

  • CVE-2016-6345 RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References