Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-2974

Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol

Description

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat build of Quarkus 2.13.8.Final

Default version status: affected

  • 2.13.8.Final-redhat-00004 to < *unaffected

Red Hat Red Hat build of Quarkus 2.13.8.Final

Default version status: affected

  • 2.13.8.Final-redhat-00004 to < *unaffected

References