CVE-2024-2700

CVSS 3.1 Score 7.0 of 10 (high)

Details

Published Apr 4, 2024
CWE ID 526

Summary

CVE-2024-2700 is a vulnerability found in the quarkus-core component. It occurs when local environment variables set by developers or CI environments for testing purposes are captured into the built application, leading to potentially dangerous behavior if the application does not override these values. This vulnerability affects the quarkus.* namespace configuration properties and can pose a high risk to organizations as it could result in the compromise of confidentiality and integrity of data. The base severity score for this vulnerability is rated as high, with a score of 7.0 according to CVSS version 3.1. Remediation would involve ensuring that application-specific properties are not captured and overriding any potentially unsafe values with secure configurations.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-2700 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options