GHSA-hr32-mgpm-qf2f

ghsaUSosv

Generation of Error Message Containing Sensitive Information in RESTEasy client

view advisory published 2021-06-03Licence: CC-BY-4.0

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25633US	medium5.3	1.18% (67th)	—	2020-09-18
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the serve…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633WEB
https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0WEB
https://issues.redhat.com/browse/RESTEASY-2820WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25633ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan