CVE-2020-25633CWE-209

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final

Medium · published September 18, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01178 · 67.4th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2020-09-18T18:10Z
EPSS history
Timeline
  • 18 SEP 18:10Z
    A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final
    cvelistv5