CVE-2023-54356

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.9.5

Description TLS endpoints support insecure 3DES cipher suites, specifically TLS ECDHE RSA WITH 3DES EDE CBC SHA and TLS RSA WITH 3DES EDE CBC SHA. These 64-bit block ciphers are susceptible to the Sweet32 attack, where an attacker could recover small amounts of plaintext over very long-lived TLS connections that carry large volumes of traffic.

Recommendations Update to version 1.9.5 or 1.10.0.