A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Project Subscriptions

Vendors Products
Amq Streams Subscribe
Container Native Virtualization Subscribe
Devworkspace Subscribe
Enterprise Linux Subscribe
Multicluster Engine Subscribe
Openshift Subscribe
Openshift Container Platform Subscribe
Openshift Container Platform For Arm64 Subscribe
Openshift Container Platform For Linuxone Subscribe
Openshift Container Platform For Power Subscribe
Openshift Container Platform Ibm Z Systems Subscribe
Openshift Data Foundation Subscribe
Openshift Devspaces Subscribe
Openshift Sandboxed Containers Subscribe
Openshift Serverless Subscribe
Serverless Subscribe
Service Mesh Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-43777 A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
Fixes

Solution

No solution given by the vendor.


Workaround

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected packages as soon as possible.

History

Mon, 02 Dec 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat devworkspace
CPEs cpe:/a:devworkspace:1.0::el8 cpe:/a:redhat:devworkspace:1.0::el8
Vendors & Products Devworkspace
Devworkspace 1.0
Redhat devworkspace

Fri, 22 Nov 2024 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-166 CWE-327

Thu, 24 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Sun, 08 Sep 2024 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8

Mon, 19 Aug 2024 22:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-10-24T19:13:59.907Z

Reserved: 2023-06-03T17:29:23.874Z

Link: CVE-2023-3089

cve-icon Vulnrichment

Updated: 2024-08-02T06:41:04.166Z

cve-icon NVD

Status : Modified

Published: 2023-07-05T13:15:09.707

Modified: 2024-11-21T08:16:25.273

Link: CVE-2023-3089

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-07-05T12:00:00Z

Links: CVE-2023-3089 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses