VDB
BDU%3A2023-03765
BDU%3A2023-03765
PUBLISHED
CVSS 6.5 MEDIUM
Уязвимость реализации протокола TLS Java-фреймворка Quarkus, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения | Red Hat build of Quarkus, quarkus | |
| Red Hat | Red Hat build of Quarkus 2.13.8.Final | 2.13.8.Final-redhat-00004 |
| Red Hat | Red Hat build of Quarkus 2.13.8.Final | 2.13.8.Final-redhat-00004 |
Timeline
- Jul 4, 2023 CVE Published
- Jul 18, 2023 CVE Updated
- May 4, 2026 Distribution Patch
- May 4, 2026 Security Advisory
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2211026 url
- https://vuldb.com/ru/?id.232671 url
- https://access.redhat.com/security/cve/cve-2023-2974 url
- https://github.com/quarkusio/quarkus/releases/tag/2.13.8.Final advisory
- RHSA-2023:3809 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-2974 vdb