CVE-2023-2974 — Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol
A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can forc…
Published: 2023-07-04 · CVSS: 6.5 · CVSS 3.1
A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7