GHSA-9699-gm7f-cmjv

ghsaUSosv

Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

view advisory published 2021-06-08Licence: CC-BY-4.0

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-25724US	medium4.3	0.63% (50th)	—	2021-05-26
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/security/cve/cve-2020-25724WEB
https://bugzilla.redhat.com/show_bug.cgi?id=1899354WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-25724ADVISORY
https://security.netapp.com/advisory/ntap-20210702-0003WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan