vulnerability
Red Hat OpenShift: CVE-2023-3089: openshift: OCP & FIPS mode
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:C/I:N/A:N) | 2023-07-05 | 2023-07-07 | 2025-04-14 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
2023-07-05
Added
2023-07-07
Modified
2025-04-14
Description
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
Solution(s)
linuxrpm-upgrade-openshiftlinuxrpm-upgrade-openshift-ansible
References
- CVE-2023-3089
- https://attackerkb.com/topics/CVE-2023-3089
- REDHAT-RHSA-2023:3910
- REDHAT-RHSA-2023:3911
- REDHAT-RHSA-2023:3914
- REDHAT-RHSA-2023:3915
- REDHAT-RHSA-2023:3924
- REDHAT-RHSA-2023:3925
- REDHAT-RHSA-2023:4093
- REDHAT-RHSA-2023:4112
- REDHAT-RHSA-2023:4113
- REDHAT-RHSA-2023:4114
- REDHAT-RHSA-2023:4204
- REDHAT-RHSA-2023:4238
- REDHAT-RHSA-2023:4241
- REDHAT-RHSA-2023:4276
- REDHAT-RHSA-2023:4286
- REDHAT-RHSA-2023:4287
- REDHAT-RHSA-2023:4290
- REDHAT-RHSA-2023:4421
- REDHAT-RHSA-2023:4437
- REDHAT-RHSA-2023:4456
- REDHAT-RHSA-2023:4471
- REDHAT-RHSA-2023:4472
- REDHAT-RHSA-2023:4475
- REDHAT-RHSA-2023:4575
- REDHAT-RHSA-2023:4576
- REDHAT-RHSA-2023:4650
- REDHAT-RHSA-2023:4654
- REDHAT-RHSA-2023:4664
- REDHAT-RHSA-2023:4862
- REDHAT-RHSA-2023:4875
- REDHAT-RHSA-2023:4972
- REDHAT-RHSA-2023:4980
- REDHAT-RHSA-2023:5006
- REDHAT-RHSA-2023:5009
- REDHAT-RHSA-2023:5103
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.