PT-2023-23033

CVE-2023-3089

·

Published

2023-07-05

·

Updated

2023-07-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Container Platform (affected versions not specified)
Description A compliance issue was discovered in the Red Hat OpenShift Container Platform, where not all cryptographic modules in use were FIPS-validated when FIPS mode was enabled.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-693: Protection Mechanism Failure
CWE-521: Weak Password Requirements
Related identifiers
CVE-2023-3089
RHSA-2023:3910
RHSA-2023:3914
RHSA-2023:3924
RHSA-2023:4093
RHSA-2023:4471
RHSA-2023:5009
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com