In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

The version of resteasy-base installed on the remote host is prior to 3.0.6-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2398 advisory.

  - A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method     names are returned as part of the exception response when RESTEasy cannot convert one of the request URI     path or query values to the matching JAX-RS resource method's parameter value. The highest threat from     this vulnerability is to data confidentiality. (CVE-2021-20289)

  - In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and     Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local     user. (CVE-2023-0482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2705 advisory.

  - okhttp: information disclosure via improperly used cryptographic function (CVE-2021-0341)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2706 advisory.

  - okhttp: information disclosure via improperly used cryptographic function (CVE-2021-0341)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2707 advisory.

  - okhttp: information disclosure via improperly used cryptographic function (CVE-2021-0341)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1513 advisory.

  - SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - hsqldb: Untrusted input may lead to RCE attack (CVE-2022-41853)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

  - Undertow: Infinite loop in SslConduit during close (CVE-2023-1108)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1514 advisory.

  - SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - hsqldb: Untrusted input may lead to RCE attack (CVE-2022-41853)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

  - Undertow: Infinite loop in SslConduit during close (CVE-2023-1108)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1512 advisory.

  - SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  - undertow: Server identity in https connection is not checked by the undertow client (CVE-2022-4492)

  - snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode (CVE-2022-38752)

  - hsqldb: Untrusted input may lead to RCE attack (CVE-2022-41853)

  - dev-java/snakeyaml: DoS via stack overflow (CVE-2022-41854)

  - codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS (CVE-2022-41881)

  - apache-james-mime4j: Temporary File Information Disclosure in MIME4J TempFileStorageProvider     (CVE-2022-45787)

  - RESTEasy: creation of insecure temp files (CVE-2023-0482)

  - Undertow: Infinite loop in SslConduit during close (CVE-2023-1108)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
187827	Amazon Linux 2 : resteasy-base (ALAS-2024-2398)	Nessus	Amazon Linux Local Security Checks	medium
175558	RHEL 7 : Red Hat Single Sign-On 7.6.3 security update on RHEL 7 (Moderate) (RHSA-2023:2705)	Nessus	Red Hat Local Security Checks	high
175557	RHEL 8 : Red Hat Single Sign-On 7.6.3 security update on RHEL 8 (Moderate) (RHSA-2023:2706)	Nessus	Red Hat Local Security Checks	high
175556	RHEL 9 : Red Hat Single Sign-On 7.6.3 security update on RHEL 9 (Moderate) (RHSA-2023:2707)	Nessus	Red Hat Local Security Checks	high
173692	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 8 (RHSA-2023:1513)	Nessus	Red Hat Local Security Checks	critical
173691	RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 9 (RHSA-2023:1514)	Nessus	Red Hat Local Security Checks	critical
173690	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 (RHSA-2023:1512)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2023-0482

medium

Tenable Plugins

medium

high

high

high

critical

critical

critical