CVE-2020-25724
Published: 26 May 2021
Summary
CVE-2020-25724 is a medium-severity Unsynchronized Access to Shared Data in a Multithreaded Context (CWE-567) vulnerability in Redhat Resteasy. Its CVSS base score is 4.3 (Medium).
Operationally, ranked at the 32.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-1298
Vulnerability details
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before…
more
resteasy 2.0.0.Alpha3 are affected.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.