CVE-2023-3089
Ocp & fips mode
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
05 jul 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Produtos afetados
n/a · openshiftRed Hat · OpenShift ServerlessRed Hat · OpenShift Service Mesh 2.2.xRed Hat · OpenShift Service Mesh 2.3.xRed Hat · OpenShift Service Mesh 2.4Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2Red Hat · Red Hat JBoss A-MQ StreamsRed Hat · Red Hat OpenShift Container Platform 3.11Red Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat Openshift Data Foundation 4Red Hat · Red Hat Openshift sandboxed containersRed Hat · Red Hat OpenShift Virtualization 4Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →