PT-2020-16141

CVE-2020-25633

·

Published

2020-09-18

·

Updated

2025-08-07

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions RESTEasy versions prior to 4.5.6.Final
Description A flaw was found in the RESTEasy client that may allow client users to obtain the server's potentially sensitive information when the server receives a WebApplicationException from the RESTEasy client call. The highest threat from this issue is to data confidentiality.
Recommendations For versions prior to 4.5.6.Final, update to version 4.5.6.Final or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-HR32-MGPM-QF2F
RHSA-2021:0246
RHSA-2021:0247
RHSA-2021:0248
RHSA-2021:1313
USN-7351-1
USN-7630-1
Found an issue in the description? Have something to add? Feel free to write us 👾