RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 9 (RHSA-2023:1514)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1514 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 8 (RHSA-2023:1513)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1513 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 (RHSA-2023:1512)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1512 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

Insecure Temporary Files

org.jboss.resteasy, resteasy-jaxrs-all is vulnerable to Insecure Temporary Files. The vulnerablity is due to using insecure file creation function File.createTempFile while creating temporary files. This can lead to attacker read/modify/write temporary files resulting in sensitive information...

Information Disclosure

resteasy-reactive-common is vulnerable to Information Disclosure. The vulnerability exists because the readFrom function in FileBodyHandler.java creates a temporary file with insecure permissions, which allows a local user to read the temporary file created...

io.quarkus.resteasy.reactive:resteasy-reactive (2.5.2.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.5.2.final) +51 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.5.2.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkiverse.neo4j:quarkus-neo4j-integration-tests (1.2.0), io.quarkiverse.quinoa:quarkus-quinoa-deployment (>=1.0.2, <=1.0.3) +75 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.9.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkus.resteasy.reactive:resteasy-reactive (1.11.7.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (1.11.7.final) +18 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (1.11.7.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 1.11.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.5.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.5.0.cr1) +51 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.5.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.12.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.12.0.cr1) +70 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.12.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.1.1.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.1.1.final) +33 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.1.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkiverse.wiremock:quarkus-wiremock-integration-tests (0.1.0), io.quarkus.resteasy.reactive:resteasy-reactive (2.16.11.final) +76 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.16.11.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.16.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkus.resteasy.reactive:resteasy-reactive (1.13.5.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (1.13.5.final) +24 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (1.13.5.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 1.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.debezium:debezium-quarkus-outbox-deployment (>=1.9.0.beta1, <=1.9.8.final), io.quarkus.resteasy.reactive:resteasy-reactive (2.7.2.final) +60 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.7.2.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.7.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.debezium:debezium-quarkus-outbox-deployment...

com.abavilla:fpi-framework-core (1.6.1), com.abavilla:fpi-framework-pom (1.6.1) +88 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.15.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.15.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - com.abavilla:fpi-framework-core 1.6.1 -...