Lucene search

[email protected]NVD:CVE-2020-25724

HistoryMay 26, 2021 - 9:15 p.m.

CVE-2020-25724

2021-05-2621:15:08

CWE-567

[email protected]

web.nvd.nist.gov

flaw

resteasy

http request

access

privileged information

vulnerability

confidentiality

integrity

version 2.0.0.alpha3

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

JSON

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Affected configurations

Nvd

Node

redhatresteasyRange<2.0.0

redhatresteasyMatch2.0.0alpha1

redhatresteasyMatch2.0.0alpha2

Node

quarkusquarkusRange<1.11.2

VendorProductVersionCPE
redhatresteasy*cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*
redhatresteasy2.0.0cpe:2.3:a:redhat:resteasy:2.0.0:alpha1:*:*:*:*:*:*
redhatresteasy2.0.0cpe:2.3:a:redhat:resteasy:2.0.0:alpha2:*:*:*:*:*:*
quarkusquarkus*cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	resteasy	*	cpe:2.3:a:redhat:resteasy::::::::
redhat	resteasy	2.0.0	cpe:2.3:a:redhat:resteasy:2.0.0:alpha1::::::
redhat	resteasy	2.0.0	cpe:2.3:a:redhat:resteasy:2.0.0:alpha2::::::
quarkus	quarkus	*	cpe:2.3:a:quarkus:quarkus::::::::