CVE-2023-3089

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2023-07-05

Last modified

2024-10-24

Weaknesses

CWE-521, CWE-693

Affected products

• Acm (Redhat)
• Amq Streams (Redhat)
• Container Native Virtualization (Redhat)
• Openshift (Redhat)
• Openshift Container Platform (Redhat)
• Openshift Container Platform For Arm64 (Redhat)
• Openshift Container Platform For Linuxone (Redhat)
• Openshift Container Platform For Power (Redhat)
• Openshift Container Platform Ibm Z Systems (Redhat)
• Openshift Data Foundation (Redhat)
• Openshift Sandboxed Containers (Redhat)
• Serverless (Redhat)
• Service Mesh (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2023-3089
• https://bugzilla.redhat.com/show_bug.cgi?id=2212085