CVE-2024-1979CWE-200information-disclosure

CVE-2024-1979

Low · published March 13, 2024

CVSS v3.1
3.5
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-03-13T14:15Z
References (8)
https://access.redhat.com/errata/RHSA-2024:1662 · [email protected]https://access.redhat.com/security/cve/CVE-2024-1979 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2266690 · [email protected]https://github.com/quarkusio/quarkus/issues/38055 · [email protected]https://access.redhat.com/errata/RHSA-2024:1662 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2024-1979 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2266690 · af854a3a-2127-422b-91ae-364da2661108https://github.com/quarkusio/quarkus/issues/38055 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 13 MAR 09:41Z
    Quarkus: information leak in annotation
    cvelistv5