Description

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1899354

https://security.netapp.com/advisory/ntap-20210702-0003/

Related Vulnerabilities

CVE-2023-26474 Vulnerability in maven package org.xwiki.platform:xwiki-platform-legacy-oldcore

CVE-2019-1003062 Vulnerability in maven package org.jenkins-ci.plugins:aws-cloudwatch-logs-publisher

CVE-2022-36007 Vulnerability in maven package com.github.jlangch:venice

CVE-2023-24442 Vulnerability in maven package org.jenkins-ci.plugins:github-pr-coverage-status

CVE-2022-31690 Vulnerability in maven package org.springframework.security:spring-security-oauth2-client

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Issue Tracking Vendor Advisory Third Party Advisory NVD-CWE-noinfo