CVE-2024-2700
CVSS 3.1 Score 7.0 of 10 (high)
Details
Summary
CVE-2024-2700 is a vulnerability found in the quarkus-core component. It occurs when local environment variables set by developers or CI environments for testing purposes are captured into the built application, leading to potentially dangerous behavior if the application does not override these values. This vulnerability affects the `quarkus.*` namespace configuration properties and can pose a high risk to organizations as it could result in the compromise of confidentiality and integrity of data. The base severity score for this vulnerability is rated as high, with a score of 7.0 according to CVSS version 3.1. Remediation would involve ensuring that application-specific properties are not captured and overriding any potentially unsafe values with secure configurations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions