Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-25724
HistoryMay 26, 2021 - 12:00 a.m.

CVE-2020-25724

2021-05-2600:00:00
ubuntu.com
ubuntu.com
12
flaw
resteasy
http
attacker
privileged info
confidentiality
integrity
vulnerability
versions before 2.0.0.alpha3

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

A flaw was found in RESTEasy, where an incorrect response to an HTTP
request is provided. This flaw allows an attacker to gain access to
privileged information. The highest threat from this vulnerability is to
confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are
affected.

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%