Описание
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | DNE | |
| cosmic | DNE | |
| devel | not-affected | 3.6.2-3 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | released | 3.0.6-3ubuntu0.1~esm1 |
| esm-apps/focal | not-affected | 3.6.2-2 |
| esm-apps/jammy | not-affected | 3.6.2-2 |
| esm-apps/noble | not-affected | 3.6.2-2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.0.20 |
| esm-apps/bionic | not-affected | 3.0.20 |
| esm-apps/focal | not-affected | 3.0.20 |
| esm-apps/jammy | not-affected | 3.0.20 |
| esm-apps/noble | not-affected | 3.0.20 |
| jammy | not-affected | 3.0.20 |
| noble | not-affected | 3.0.20 |
| plucky | not-affected | 3.0.20 |
| upstream | released | 3.0.20 |
Показывать по
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
RESTEasy allows remote authenticated users to obtain sensitive informa ...
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3