Security Advisory

CVE-2022-0981

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-23 19:46:41
Last updated 2024-08-02 23:47:43
Assigner redhat
State PUBLISHED

Description

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.