Описание
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
Ссылки
- Third Party AdvisoryVDB Entry
- Issue Tracking
- Third Party AdvisoryVDB Entry
- Issue Tracking
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:redhat:resteasy:-:*:*:*:*:*:*:*
EPSS
Процентиль: 72%
0.01497
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 6.5
ubuntu
почти 10 лет назад
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
CVSS3: 3.5
redhat
почти 10 лет назад
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
CVSS3: 6.5
debian
почти 10 лет назад
RESTEasy allows remote authenticated users to obtain sensitive informa ...
CVSS3: 6.5
github
больше 4 лет назад
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
EPSS
Процентиль: 72%
0.01497
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200