CVE-2023-2974

Summary

CVE-2023-2974 is a vulnerability affecting Quarkus, specifically in the quarkus-core component. The weakness lies in the TLS protocol configuration, where Quarkus does not enforce the selected protocol but instead allows clients to choose from the supported but weaker options. This can lead to potential security risks, as weak TLS protocols are more susceptible to attacks. It is recommended to update Quarkus to a version with improved TLS protocol enforcement to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.