A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data     confidentiality (CVE-2016-6345)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via     unspecified vectors. (CVE-2016-6346)

  - Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote     attackers to inject arbitrary web script or HTML via unspecified vectors. (CVE-2016-6347)

  - JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion     (XSSI) attack. (CVE-2016-6348)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of resteasy-base installed on the remote host is prior to 3.0.6-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2398 advisory.

  - A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method     names are returned as part of the exception response when RESTEasy cannot convert one of the request URI     path or query values to the matching JAX-RS resource method's parameter value. The highest threat from     this vulnerability is to data confidentiality. (CVE-2021-20289)

  - In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and     Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local     user. (CVE-2023-0482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0152 advisory.

  - keycloak-server-spi-private: ECP SAML binding bypasses authentication flows (CVE-2021-3827)

  - Keycloak: Incorrect authorization allows unpriviledged users to create other users (CVE-2021-4133)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0151 advisory.

  - keycloak-server-spi-private: ECP SAML binding bypasses authentication flows (CVE-2021-3827)

  - Keycloak: Incorrect authorization allows unpriviledged users to create other users (CVE-2021-4133)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5151 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5149 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:5150 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

  - xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4676 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server (CVE-2021-30129)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4677 advisory.

  - undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)

  - wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users     (CVE-2021-3717)

  - resteasy: Error message exposes endpoint class information (CVE-2021-20289)

  - mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server (CVE-2021-30129)

  - jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196606	RHEL 7 : resteasy (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
187827	Amazon Linux 2 : resteasy-base (ALAS-2024-2398)	Nessus	Amazon Linux Local Security Checks	medium
156792	RHEL 8 : Red Hat Single Sign-On 7.5.1 security update on RHEL 8 (Important) (RHSA-2022:0152)	Nessus	Red Hat Local Security Checks	high
156788	RHEL 7 : Red Hat Single Sign-On 7.5.1 security update on RHEL 7 (Important) (RHSA-2022:0151)	Nessus	Red Hat Local Security Checks	high
156111	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 8 (Moderate) (RHSA-2021:5151)	Nessus	Red Hat Local Security Checks	high
156109	RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6 (Moderate) (RHSA-2021:5149)	Nessus	Red Hat Local Security Checks	high
156106	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 7 (Moderate) (RHSA-2021:5150)	Nessus	Red Hat Local Security Checks	high
155386	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7 (Moderate) (RHSA-2021:4676)	Nessus	Red Hat Local Security Checks	high
155365	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8 (Moderate) (RHSA-2021:4677)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2021-20289

medium

Tenable Plugins

medium

medium

high

high

high

high

high

high

high