CVE-2023-3089

Summary

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Affected Software

Weaknesses

• CWE-693: Protection Mechanism Failure

Workarounds

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2023-3089
• https://bugzilla.redhat.com/show_bug.cgi?id=2212085

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2023-3089
• https://bugzilla.redhat.com/show_bug.cgi?id=2212085

• ←Previous
• Next→