resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling
Published Sep 18, 2020
5.3
MEDIUMCVSS 3.1
EPSS 1.18%
Description
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.
Affected products
-
- Version through 4.5.6StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Resteasy-Client | n/a |
|
No data.
Red Hat Fuse 7.9
resteasy-client
Fixed · RHSA-2021:3140
Red Hat JBoss Enterprise Application Platform
org.jboss.resteasy/resteasy-client:3.15.1.Final-redhat-00001
Fixed · RHSA-2021:2858
Red Hat JBoss Enterprise Application Platform 7
resteasy-client
Fixed · RHSA-2021:0250
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el6eap
Fixed · RHSA-2021:0246
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el7eap
Fixed · RHSA-2021:0247
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el8eap
Fixed · RHSA-2021:0248
Red Hat Satellite 6.9 for RHEL 7
candlepin-0:3.1.26-1.el7sat
Fixed · RHSA-2021:1313
Red Hat Single Sign-On 7.4.5
n/a
Fixed · RHSA-2021:0327
Text-Only RHOAR
n/a
Fixed · RHSA-2021:0295
Text-Only RHOAR
resteasy-client
Fixed · RHSA-2021:1004
A-MQ Clients 2
resteasy-client
Not affected
Red Hat Data Grid 8
resteasy-client
Not affected
Red Hat Decision Manager 7
resteasy-client
Not affected
Red Hat Enterprise Linux 7
resteasy-base
Will not fix
Red Hat Enterprise Linux 8
pki-deps:10.6/resteasy
Will not fix
Red Hat Integration Service Registry
resteasy-client
Fix deferred
Red Hat JBoss Data Grid 7
resteasy-client
Out of support scope
Red Hat JBoss Enterprise Application Platform Continuous Delivery
resteasy-client
Out of support scope
Red Hat JBoss Fuse 6
resteasy-client
Out of support scope
Red Hat OpenShift Application Runtimes
resteasy-client
Affected
Red Hat Process Automation 7
resteasy-client
Not affected
Red Hat Single Sign-On 7
resteasy-client
Affected
Red Hat build of Quarkus
resteasy-client
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Fuse 7.9 | resteasy-client | Fixed | RHSA-2021:3140 |
| Red Hat JBoss Enterprise Application Platform | org.jboss.resteasy/resteasy-client:3.15.1.Final-redhat-00001 | Fixed | RHSA-2021:2858 |
| Red Hat JBoss Enterprise Application Platform 7 | resteasy-client | Fixed | RHSA-2021:0250 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el6eap | Fixed | RHSA-2021:0246 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el7eap | Fixed | RHSA-2021:0247 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-activemq-artemis-0:2.9.0-7.redhat_00017.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-glassfish-jsf-0:2.3.9-12.SP13_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-hal-console-0:3.2.12-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-hibernate-0:5.3.20-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-httpcomponents-client-0:4.5.13-1.redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-ejb-client-0:4.0.37-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-genericjms-0:2.0.8-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-modules-0:1.11.0-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-remoting-0:5.0.20-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-server-migration-0:1.7.2-4.Final_redhat_00005.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-jboss-xnio-base-0:3.7.12-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-narayana-0:5.9.10-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-opentracing-interceptors-0:0.0.4.1-2.redhat_00002.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-resteasy-0:3.11.3-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-undertow-0:2.0.33-1.SP2_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-wildfly-0:7.3.5-2.GA_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-wildfly-discovery-0:1.2.1-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-wildfly-elytron-0:1.10.10-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | eap7-wildfly-http-client-0:1.0.24-1.Final_redhat_00001.1.el8eap | Fixed | RHSA-2021:0248 |
| Red Hat Satellite 6.9 for RHEL 7 | candlepin-0:3.1.26-1.el7sat | Fixed | RHSA-2021:1313 |
| Red Hat Single Sign-On 7.4.5 | n/a | Fixed | RHSA-2021:0327 |
| Text-Only RHOAR | n/a | Fixed | RHSA-2021:0295 |
| Text-Only RHOAR | resteasy-client | Fixed | RHSA-2021:1004 |
| A-MQ Clients 2 | resteasy-client | Not affected | n/a |
| Red Hat Data Grid 8 | resteasy-client | Not affected | n/a |
| Red Hat Decision Manager 7 | resteasy-client | Not affected | n/a |
| Red Hat Enterprise Linux 7 | resteasy-base | Will not fix | n/a |
| Red Hat Enterprise Linux 8 | pki-deps:10.6/resteasy | Will not fix | n/a |
| Red Hat Integration Service Registry | resteasy-client | Fix deferred | n/a |
| Red Hat JBoss Data Grid 7 | resteasy-client | Out of support scope | n/a |
| Red Hat JBoss Enterprise Application Platform Continuous Delivery | resteasy-client | Out of support scope | n/a |
| Red Hat JBoss Fuse 6 | resteasy-client | Out of support scope | n/a |
| Red Hat OpenShift Application Runtimes | resteasy-client | Affected | n/a |
| Red Hat Process Automation 7 | resteasy-client | Not affected | n/a |
| Red Hat Single Sign-On 7 | resteasy-client | Affected | n/a |
| Red Hat build of Quarkus | resteasy-client | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (9)
- https://access.redhat.com/security/cve/CVE-2020-25633 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1879042 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633 x_refsource_CONFIRMIssue TrackingVendor Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1336 Advisory
- https://github.com/advisories/GHSA-hr32-mgpm-qf2f Advisory
- https://github.com/resteasy/Resteasy/pull/2665/commits/13c808b5967242eec1e877edbc0014a84dcd6eb0
- https://issues.redhat.com/browse/RESTEASY-2820
- https://nvd.nist.gov/vuln/detail/CVE-2020-25633
- https://www.cve.org/CVERecord?id=CVE-2020-25633
Change history (0)
No recorded changes yet.