CVE-2024-1979

Published: Mar 13, 2024Modified: Jun 17, 2026Deferred

3.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

https://access.redhat.com/errata/RHSA-2024:1662

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2024-1979

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2266690

Source: secalert@redhat.com

https://github.com/quarkusio/quarkus/issues/38055

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:1662

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/security/cve/CVE-2024-1979

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=2266690

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/quarkusio/quarkus/issues/38055

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.