A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Build_of_quarkus | Redhat | * | 2.13.8 (excluding) |
| Red Hat build of Quarkus 2.13.8.Final | RedHat | io.quarkus/quarkus-grpc:2.13.8.Final-redhat-00004 | * |
| Red Hat build of Quarkus 2.13.8.Final | RedHat | io.quarkus/quarkus-vertx-http:2.13.8.Final-redhat-00004 | * |