1769 matches found
CVE-2020-25724
RESTEasy CVE-2020-25724: A flaw causes an incorrect HTTP response which can lead to information disclosure and partial confidentiality impact. Affected are RESTEasy versions before 2.0.0.Alpha3. Exploitation details are not provided in the available documents; no explicit exploit vectors, mitiga...
CVE-2020-25724
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected...
PT-2021-11173
Name of the Vulnerable Software and Affected Versions: RESTEasy versions prior to 2.0.0.Alpha3 Description: A flaw in RESTEasy allows an attacker to gain access to privileged information by providing an incorrect response to an HTTP request. This issue primarily threatens confidentiality and...
CVE-2020-25724: Unsynchronized Access to Shared Data in a Multithreaded Context
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected...
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
apache-commons-collections jss 4.8.1-2 - Bug 1932803 - HSM + FIPS: CMCRequest with a shared secret resulting in error 4.8.1-1 - Rebase to upstream JSS v4.8.1 - Red Hat Bugilla 1908541 - jss broke SCEP - missing PasswordChallenge class - Red Hat Bugilla 1489256 - RFE jss should support RSA with OA...
CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1775 advisory. - resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Note that Nessus has not tested for this issue but has...
RHEL 8 : pki-core:10.6 and pki-deps:10.6 (RHSA-2021:1775)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1775 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: resteasy: Improper...
Moderate: Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
An update for the pki-core:10.6 and pki-deps:10.6 modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed...
RLSA-2021:1775 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
The Public Key Infrastructure PKI Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fixes: resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 For more details about the security issues...
OESA-2021-1171 resteasy security update
%global desc \ RESTEasy contains a JBoss project that provides frameworks to help\ build RESTful Web Services and RESTful Java applications. It is a fully\ certified and portable implementation of the JAX-RS specification. %desc %global extdesc %desc\ \ This package contains Security Fixes: A fla...
io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2020-10687 via io.undertow:undertow-core (1.0.1.final)
io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...
io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2020-10705 via io.undertow:undertow-core (1.0.1.final)
io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...
io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2020-10719 via io.undertow:undertow-core (1.0.1.final)
io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...
resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling
A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...
br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +1014 more potentially affected by CVE-2021-20289 via org.jboss.resteasy:resteasy-core (>=4.0.0.final, <=4.5.9.final)
org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.final, =0.1.5, =0.1.5, =1.8.0, =1.5.0-alpha2, =1.5.0-alpha2, =1.6.1, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =4.0, =4.0, =4.0, =4.0, =4.1.2 and more Source cves: CVE-2021-20289https:...
com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-application (>=1.1.0-rc1, <=1.1.0-rc2), com.datastax.oss.quarkus:cassandra-quarkus-integration-tests-main (>=1.1.0-rc1, <=1.1.0-rc2) +449 more potentially affected by CVE-2021-20289 via org.jboss.resteasy:resteasy-core (>=4.6.0.final, <=4.6.1.beta9)
org.jboss.resteasy:resteasy-core MAVEN version =4.6.0.final, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1.0-rc1, =1.1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.0-cr-1, =6.4.1...
br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +1014 more potentially affected by CVE-2021-20289 via org.jboss.resteasy:resteasy-core (>=4.0.0.final, <=4.5.9.final)
org.jboss.resteasy:resteasy-core MAVEN version =4.0.0.final, =0.1.5, =0.1.5, =1.8.0, =1.5.0-alpha2, =1.5.0-alpha2, =1.6.1, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =1.5.0-alpha3, =4.0, =4.0, =4.0, =4.0, =4.1.2 and more Source cves: CVE-2021-20289https:...
GHSA-244R-FCJ3-GHJQ Exposure of class information in RESTEasy
A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...
Exposure of class information in RESTEasy
A flaw was found in RESTEasy in all current versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...