The vulnerability of the RESTEasy software lies in the lack of protection for operational data, which allows attackers to disclose sensitive information that should be protected.

🗓️ 11 May 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

RESTEasy has unprotected operational data, enabling remote disclosure of sensitive information.

Reporter	Title	Published	Views	Family All 88
Tenable Nessus	Amazon Linux 2 : resteasy-base (ALAS-2024-2398)	9 Jan 202400:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7 (Moderate) (RHSA-2021:4676)	17 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8 (Moderate) (RHSA-2021:4677)	16 Nov 202100:00	–	nessus
Tenable Nessus	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6 (Moderate) (RHSA-2021:5149)	15 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 7 (Moderate) (RHSA-2021:5150)	15 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 8 (Moderate) (RHSA-2021:5151)	16 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat Single Sign-On 7.5.1 security update on RHEL 7 (Important) (RHSA-2022:0151)	18 Jan 202200:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat Single Sign-On 7.5.1 security update on RHEL 8 (Important) (RHSA-2022:0152)	18 Jan 202200:00	–	nessus
Tenable Nessus	RHEL 7 : resteasy (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 8 : candlepin (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

Vulners

Node

red_hat openshift_application_runtimesMatch1.0

OR

red_hat jboss_enterprise_application_platformMatch7

OR

red_hat red_hat_single_sign-onMatch7

OR

red_hat red_hat_amq_brokerMatch7

OR

red_hat jboss_a-mqMatch7

OR

red_hat red_hat_codeready_studioMatch12

OR

oracle oracle_communications_cloud_native_core_consoleMatch1.9.0

OR

red_hat red_hat_enterprise_linuxMatch8

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2022.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

30 Sep 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

CVSS 35.3

EPSS0.00084

RESTEasy unprotected operational data remote disclosure sensitive information