Lucene search
Redhat.comRH:CVE-2016-6345HistorySep 01, 2016 - 12:48 a.m.
CVE-2016-6345
2016-09-0100:48:39
redhat.com
access.redhat.com
11
0.001 Low
EPSS
Percentile
45.3%
It was found that there was insufficient use of randam values in RESTEasy async jobs. An attacker could use this flaw to steal user data.
Mitigation
Don't enable Async Jobs Service as details in the section, "2.10. RESTEASY ASYNCHRONOUS JOB SERVICE" of JBoss EAP 7 Developing Web Services Applications documentation: <https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/7.0/paged/developing-web-services-applications/chapter-2-developing-jax-rs-web-services>
Related
nvd
nvd
CVE-2016-6345
2016-09-07 18:59:02
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
2022-05-17 03:49:16
cvelist
cvelist
CVE-2016-6345
2016-09-07 18:00:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
2022-05-17 03:49:16
cve
cve
CVE-2016-6345
2016-09-07 18:59:02
debiancve
debiancve
CVE-2016-6345
2016-09-07 18:59:02
ubuntucve
ubuntucve
CVE-2016-6345
2016-09-07 00:00:00
prion
prion
Design/Logic Flaw
2016-09-07 18:59:00
nessus
nessus
RHEL 7 : rest (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : resteasy (Unpatched Vulnerability)
2024-05-11 00:00:00