← Back

CVE-2020-25724

nvd nist
Published: May 26, 2021Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected.

Affected (4)

Redhat
1 product
Resteasy
Quarkus
1 product
Quarkus
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Resteasy
Before 2.0.0
Resteasy
Version 2.0.0 alpha1
Resteasy
Version 2.0.0 alpha2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Quarkus
Before 1.11.2

Related CWEs

CWE-567
Unsynchronized Access to Shared Data in a Multithreaded Context
The product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior and unpredictable data changes.

References (4)

Source: secalert@redhat.com
Issue TrackingVendor Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.