Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9699-gm7f-cmjv

Опубликовано: 08 июн. 2021
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Пакеты

Наименование

org.jboss.resteasy:resteasy-bom

maven
Затронутые версииВерсия исправления

<= 2.0-beta-1

2.0-beta-2

EPSS

Процентиль: 34%
0.00132
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-567

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 4 лет назад

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

CVSS3: 4.2
redhat
около 5 лет назад

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

CVSS3: 4.3
nvd
больше 4 лет назад

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

CVSS3: 4.3
debian
больше 4 лет назад

A flaw was found in RESTEasy, where an incorrect response to an HTTP r ...

EPSS

Процентиль: 34%
0.00132
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-567