CVE-2020-25633 — Vulnetix

Try Vulnetix Request Demo

CVE-2020-25633 PUBLISHED

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.

EPSS 0.23% · 45.4th percentile

Risk Scores

EPSS Score

0.23%

45.4th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:25.10	resteasy	0, 3.6.2-3
Ubuntu:Pro:16.04:LTS	resteasy	3.0.6-3, 0
Ubuntu:Pro:22.04:LTS	resteasy	0, 3.6.2-2
Ubuntu:22.04:LTS	resteasy3.0	3.0.26-2, 0, 3.0.26-3
Ubuntu:Pro:18.04:LTS	resteasy3.0	3.0.19-2, 3.0.19-1, 3.0.26-1~18.04
Ubuntu:Pro:24.04:LTS	resteasy	3.6.2-2, 0
Ubuntu:Pro:20.04:LTS	resteasy3.0	3.0.26-1, 0
Ubuntu:Pro:20.04:LTS	resteasy	3.6.2-2, 0
Ubuntu:24.04:LTS	resteasy3.0	3.0.26-6, 0
Ubuntu:25.10	resteasy3.0	0, 3.0.26-6

Timeline

Sep 18, 2020 CVE Published
Apr 8, 2021 CVE Updated
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jun 29, 2022 EPSS Score
Aug 31, 2022 EPSS Score

References

https://ubuntu.com/security/CVE-2020-25633 third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1879042 third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2020-25633 third-party-advisory
https://ubuntu.com/security/notices/USN-7351-1 vendor-advisory
https://ubuntu.com/security/notices/USN-7630-1 vendor-advisory

Open in Interactive Console →