Description
A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat build of Quarkus 2.13.8.Final | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.quarkus:quarkus-core | < 2.16.8.Final | 2.16.8.Final | GHSA-3fhx-3vvg-2j84 |
Advisories 1
- WID-SEC-2024-1769 Hitachi Ops Center: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Aug 5, 2024
References
- RHSA-2023:3809 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-2974 vdb-entry
- RHBZ#2211026 issue-tracking