Design/Logic Flaw

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

UBUNTU-CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

CVE-2016-6346

CVE-2016-6346 affects RESTEasy: enabling a vulnerable GZIP decompression path can cause a denial of service via unspecified vectors. The Ubuntu advisory USN-7630-1 documents RESTEasy vulnerabilities including CVE-2016-6346 and notes affected Ubuntu releases; Nessus/OSS advisories reference unpatc...

org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)

org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6345 Source advisory: MEND:CVE-2016-6345...

CVE-2016-6346

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

CVE-2016-6346

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-6346

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

CVE-2016-6345

RESTEasy vulnerability CVE-2016-6345 is confirmed in connected documents as a flaw where remote authenticated users could obtain sensitive information due to insufficient use of random values in asynchronous jobs. The Ubuntu advisory USN-7630-1 and related Nessus/OpenVAS entries reference this CV...

CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

CVE-2016-6346: Undefined Security Weakness

RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2016-6345: Exposure of Sensitive Information to an Unauthorized Actor

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs...

RESTEasy Cross-Site Scripting Vulnerability

RESTEasy is an open source architecture for building web framework applications. RESTEasy suffers from a cross-site scripting vulnerability due to a failure to properly filter user-supplied input. An attacker could be allowed to exploit the vulnerability to steal cookie-based authentication...

PT-2016-6834

Name of the Vulnerable Software and Affected Versions RESTEasy affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by leveraging insufficient use of random values in async jobs. Recommendations At the moment, there is no...

PT-2016-6835

Name of the Vulnerable Software and Affected Versions RESTEasy affected versions not specified Description The issue allows remote attackers to cause a denial of service via unspecified vectors, due to the GZIPInterceptor being enabled. Recommendations At the moment, there is no information about...

Red Hat RESTEasy Information Disclosure Vulnerability

RESTEasy is one of the JBoss open source project , is a RESTful Web Services framework. Red Hat RESTEasy information disclosure vulnerability exists. Attackers can use this vulnerability to obtain sensitive information...

Red Hat RESTEasy Denial of Service Vulnerability

RESTEasy is one of the JBoss open source project , is a RESTful Web Services framework. A denial of service vulnerability exists in Red Hat RESTEasy. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2016-6348

It was found that in some configurations the JacksonJsonpInterceptor is activated by default in RESTEasy. An attacker could use this flaw to launch a Cross Site Scripting Inclusion attack...

CVE-2016-6347

It was found that the default exception handler in RESTEasy did not properly validate user input. An attacker could use this flaw to launch a relected XSS attack...