EUVD-2021-1336

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-25633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive...

RHEL 7 : resteasy-base (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handli...

br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +320 more potentially affected by CVE-2020-1695 via org.jboss.resteasy:resteasy-client (>=4.0.0.final, <=4.5.12.final)

org.jboss.resteasy:resteasy-client MAVEN version =4.0.0.final, =0.1.5, =0.1.5, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =1.0.0-alpha1, =1.0.1, =1.0.4 and more Source cves: CVE-2020-1695 Source advisory: GHSA-63CQ-PPQ8-CW6G...

org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)

org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6345 Source advisory: GHSA-VXHJ-3X7P-JXP5...

org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)

org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6345 Source advisory: OSV:GHSA-VXHJ-3X7P-JXP5...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6345 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6345 Source advisory: OSV:GHSA-VXHJ-3X7P-JXP5...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6348 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6348 Source advisory: OSV:GHSA-9XFC-J5MF-9W5P...

at.porscheinformatik.zanata:common (>=4.7.0, <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0, <=4.7.8) +417 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.0-beta-1, <=3.0.19.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0-beta-1, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.1.11, =1.3.2 and more Source cves: CVE-2016-6347 Source advisory: OSV:GHSA-R346-RMRG-QPGH...

org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)

org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6347 Source advisory: OSV:GHSA-R346-RMRG-QPGH...

org.infinispan:infinispan-distribution (9.0.0.beta1), org.infinispan:infinispan-javadoc-all (9.0.0.beta1) +26 more potentially affected by CVE-2016-6347 via org.jboss.resteasy:resteasy-client (>=3.1.0.beta1, <=3.1.0.beta2)

org.jboss.resteasy:resteasy-client MAVEN version =3.1.0.beta1, =5.3.4.final, =5.3.4.final, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta1, =3.1.0.beta2 and more Source cves: CVE-2016-6347 Source advisory: GHSA-R346-RMRG-QPGH...

br.com.esec.icpm:certillion-client-library-resteasy-plugin (1.1.9), com.codereligion:bugsnag-logback (>=1.0.0, <=1.1.0) +119 more potentially affected by CVE-2014-3490 via org.jboss.resteasy:resteasy-client (>=3.0.0.final, <=3.0.8.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.final, =1.0.0, =6.0.0, =6.0.0, =7.5.0, =6.0.0, =6.0.0, =6.0.0, =7.5.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2014-3490 Source advisory: GHSA-QJPQ-5PQ3-43RR...

br.com.esec.icpm:certillion-client-library-resteasy-plugin (1.1.9), com.codereligion:bugsnag-logback (>=1.0.0, <=1.1.0) +119 more potentially affected by CVE-2014-3490 via org.jboss.resteasy:resteasy-client (>=3.0.0.final, <=3.0.8.final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.final, =1.0.0, =6.0.0, =6.0.0, =7.5.0, =6.0.0, =6.0.0, =6.0.0, =7.5.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2014-3490 Source advisory: OSV:GHSA-QJPQ-5PQ3-43RR...

Moderate: Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update

A minor version update from 7.8 to 7.9 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.3 security and bug fix update

An update is now available for Red Hat build of Thorntail. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...