Lucene search

RedhatCVE-2020-25724

HistoryMay 26, 2021 - 9:15 p.m.

CVE-2020-25724

2021-05-2621:15:08

CWE-567

redhat

web.nvd.nist.gov

cve-2020-25724

resteasy

vulnerability

http request

confidentiality

integrity

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Affected configurations

Nvd

Vulners

Node

redhatresteasyRange<2.0.0

redhatresteasyMatch2.0.0alpha1

redhatresteasyMatch2.0.0alpha2

Node

quarkusquarkusRange<1.11.2

VendorProductVersionCPE
redhatresteasy*cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*
redhatresteasy2.0.0cpe:2.3:a:redhat:resteasy:2.0.0:alpha1:*:*:*:*:*:*
redhatresteasy2.0.0cpe:2.3:a:redhat:resteasy:2.0.0:alpha2:*:*:*:*:*:*
quarkusquarkus*cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	resteasy	*	cpe:2.3:a:redhat:resteasy::::::::
redhat	resteasy	2.0.0	cpe:2.3:a:redhat:resteasy:2.0.0:alpha1::::::
redhat	resteasy	2.0.0	cpe:2.3:a:redhat:resteasy:2.0.0:alpha2::::::
quarkus	quarkus	*	cpe:2.3:a:quarkus:quarkus::::::::

CNA Affected

[
  {
    "product": "resteasy",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "resteasy 2.0.0.Alpha3"
      }
    ]
  }
]