CVE-2016-6345

RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
VendorProductVersion
redhatresteasy
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
resteasy
sid
3.6.2-2
fixed
jessie
no-dsa
resteasy3.0
bullseye
3.0.26-2
fixed
jessie
no-dsa
bookworm
3.0.26-6
fixed
sid
3.0.26-6
fixed
trixie
3.0.26-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
resteasy
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
ignored
jammy
needs-triage
impish
ignored
hirsute
ignored
groovy
ignored
focal
needs-triage
eoan
ignored
disco
ignored
cosmic
dne
bionic
dne
artful
ignored
zesty
ignored
yakkety
ignored
xenial
needs-triage
trusty
dne
precise
dne
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/92746
https://bugzilla.redhat.com/show_bug.cgi?id=1372117
http://www.securityfocus.com/bid/92746
https://bugzilla.redhat.com/show_bug.cgi?id=1372117