vulnerability
Amazon Linux AMI 2: CVE-2023-0482: Security patch for resteasy-base (ALAS-2024-2398)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:C/I:N/A:N) | Feb 17, 2023 | Jan 10, 2024 | Jan 28, 2025 |
Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
Feb 17, 2023
Added
Jan 10, 2024
Modified
Jan 28, 2025
Description
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
Solution(s)
amazon-linux-ami-2-upgrade-resteasy-baseamazon-linux-ami-2-upgrade-resteasy-base-atom-provideramazon-linux-ami-2-upgrade-resteasy-base-clientamazon-linux-ami-2-upgrade-resteasy-base-jackson-provideramazon-linux-ami-2-upgrade-resteasy-base-javadocamazon-linux-ami-2-upgrade-resteasy-base-jaxb-provideramazon-linux-ami-2-upgrade-resteasy-base-jaxrsamazon-linux-ami-2-upgrade-resteasy-base-jaxrs-allamazon-linux-ami-2-upgrade-resteasy-base-jaxrs-apiamazon-linux-ami-2-upgrade-resteasy-base-jettison-provideramazon-linux-ami-2-upgrade-resteasy-base-providers-pomamazon-linux-ami-2-upgrade-resteasy-base-resteasy-pomamazon-linux-ami-2-upgrade-resteasy-base-tjws
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.