Authors: Created by IBM


There is a vulnerability in the RESTEasy library used by IBM WebSphere Application Server Liberty when the feature restfulWS-3.0 or restfulWS-3.1 is enabled.This has been addressed in the remediation section. CVEID:  CVE-2023-0482[1]
DESCRIPTION:  RESTEasy could allow a local authenticated attacker to gain elevated privileges on the system, caused by the creation of insecure temp files in the File.createTempFile() used in the DataSourceProvider, FileProvider and Mime4JWorkaround...

Just published by IBM: Read more