redhat resteasy CVE-2020-25633 vulnerability in Red Hat and Other Products
Published on September 18, 2020

product logo product logo product logo
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.

NVD

Vulnerability Analysis

CVE-2020-25633 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

Generation of Error Message Containing Sensitive Information

The software generates an error message that includes sensitive information about its environment, users, or associated data.


Products Associated with CVE-2020-25633

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-25633 are published in these products:

Red Hat Resteasy
 
Quarkus
 
Canonical Ubuntu Linux
 

Affected Versions

Red Hat resteasy-client Version through 4.5.6 is affected by CVE-2020-25633

Exploit Probability

EPSS
0.28%
Percentile
50.71%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.