Description
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
Published: 2023-07-05
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Workaround

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-43777 A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
History

Mon, 02 Dec 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat devworkspace
CPEs cpe:/a:devworkspace:1.0::el8 cpe:/a:redhat:devworkspace:1.0::el8
Vendors & Products Devworkspace
Devworkspace 1.0
Redhat devworkspace

Fri, 22 Nov 2024 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-166 CWE-327

Thu, 24 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 08 Sep 2024 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8

Mon, 19 Aug 2024 22:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8

Subscriptions

Redhat Acm Amq Streams Container Native Virtualization Devworkspace Enterprise Linux Multicluster Engine Openshift Openshift Container Platform Openshift Container Platform For Arm64 Openshift Container Platform For Linuxone Openshift Container Platform For Power Openshift Container Platform Ibm Z Systems Openshift Data Foundation Openshift Devspaces Openshift Sandboxed Containers Openshift Serverless Serverless Service Mesh
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-10-24T19:13:59.907Z

Reserved: 2023-06-03T17:29:23.874Z

Link: CVE-2023-3089

cve-icon Vulnrichment

Updated: 2024-08-02T06:41:04.166Z

cve-icon NVD

Status : Modified

Published: 2023-07-05T13:15:09.707

Modified: 2024-11-21T08:16:25.273

Link: CVE-2023-3089

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-07-05T12:00:00Z

Links: CVE-2023-3089 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses