VDB
CVE-2020-25633
CVE-2020-25633
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to data confidentiality.
EPSS 1.18% · 66.5th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
1.18%
66.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:25.10 | resteasy | 3.6.2-3, 0 |
| Ubuntu:Pro:16.04:LTS | resteasy | 3.0.6-3, 0 |
| Ubuntu:Pro:22.04:LTS | resteasy | 0, 3.6.2-2 |
| Ubuntu:22.04:LTS | resteasy3.0 | 3.0.26-2, 3.0.26-3, 0 |
| Ubuntu:Pro:18.04:LTS | resteasy3.0 | 3.0.19-2, 0, 3.0.26-1~18.04 |
| Ubuntu:Pro:24.04:LTS | resteasy | 3.6.2-2, 0 |
| Ubuntu:Pro:20.04:LTS | resteasy3.0 | 3.0.26-1, 0 |
| Ubuntu:Pro:20.04:LTS | resteasy | 0, 3.6.2-2 |
| Ubuntu:24.04:LTS | resteasy3.0 | 0, 3.0.26-6 |
| Ubuntu:25.10 | resteasy3.0 | 3.0.26-6, 0 |
Timeline
- Sep 18, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 3, 2021 CVE Updated
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-25633 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1879042 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25633 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-25633 third-party-advisory
- https://ubuntu.com/security/notices/USN-7351-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-7630-1 vendor-advisory