PT-2026-84144
CVE-2023-54356
·
تاريخ النشر
2023-05-30
·
تاريخ التحديث
2026-10-14
الوصف من
CVSS 4.0
9.3
حرجةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Kyverno versions prior to 1.9.5
Description
TLS endpoints support insecure 3DES cipher suites, specifically TLS ECDHE RSA WITH 3DES EDE CBC SHA and TLS RSA WITH 3DES EDE CBC SHA. These 64-bit block ciphers are susceptible to the Sweet32 attack, where an attacker could recover small amounts of plaintext over very long-lived TLS connections that carry large volumes of traffic.
Recommendations
Update to version 1.9.5 or 1.10.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾