In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-resteasy-baseamazon-linux-ami-2-upgrade-resteasy-base-atom-provideramazon-linux-ami-2-upgrade-resteasy-base-clientamazon-linux-ami-2-upgrade-resteasy-base-jackson-provideramazon-linux-ami-2-upgrade-resteasy-base-javadocamazon-linux-ami-2-upgrade-resteasy-base-jaxb-provideramazon-linux-ami-2-upgrade-resteasy-base-jaxrsamazon-linux-ami-2-upgrade-resteasy-base-jaxrs-allamazon-linux-ami-2-upgrade-resteasy-base-jaxrs-apiamazon-linux-ami-2-upgrade-resteasy-base-jettison-provideramazon-linux-ami-2-upgrade-resteasy-base-providers-pomamazon-linux-ami-2-upgrade-resteasy-base-resteasy-pomamazon-linux-ami-2-upgrade-resteasy-base-tjws | Jan 10, 2024 | Feb 17, 2023 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Feb 17, 2023 | |
| Ibm Was | ibm-was-upgrade-latest | May 12, 2023 | Feb 17, 2023 | |
| Red Hat Jboss Eap | red-hat-jboss-eap-upgrade-latest | Sep 19, 2024 | Jan 31, 2023 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 17, 2023 |
| Ubuntu | ubuntu-pro-upgrade-libresteasy-javaubuntu-pro-upgrade-libresteasy3-0-javaubuntu-upgrade-libresteasy-javaubuntu-upgrade-libresteasy3-0-java | Mar 14, 2025 | Feb 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub