CVE-2016-6345

EUVD-2022-5455
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
redhatresteasy
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
resteasy
jessie
no-dsa
sid
3.6.2-2
fixed
resteasy3.0
bookworm
3.0.26-6
fixed
bullseye
3.0.26-2
fixed
jessie
no-dsa
sid
3.0.26-6
fixed
trixie
3.0.26-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
resteasy
artful
ignored
bionic
dne
cosmic
dne
disco
ignored
eoan
ignored
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
precise
dne
trusty
dne
xenial
needs-triage
yakkety
ignored
zesty
ignored
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92746
https://bugzilla.redhat.com/show_bug.cgi?id=1372117
http://www.securityfocus.com/bid/92746
https://bugzilla.redhat.com/show_bug.cgi?id=1372117