Description (CNA)
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / openshift | unaffected 4.12.0 |
| Red Hat / OpenShift Serverless | affected |
| Red Hat / OpenShift Service Mesh 2.2.x | affected |
| Red Hat / OpenShift Service Mesh 2.3.x | affected |
| Red Hat / OpenShift Service Mesh 2.4 | affected |
| Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2 | affected |
| Red Hat / Red Hat JBoss A-MQ Streams | affected |
| Red Hat / Red Hat OpenShift Container Platform 3.11 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
| Red Hat / Red Hat Openshift Data Foundation 4 | affected |
| Red Hat / Red Hat Openshift sandboxed containers | affected |
| Red Hat / Red Hat OpenShift Virtualization 4 | affected |
CWE
CWE-693
References
- https://access.redhat.com/security/cve/CVE-2023-3089
- https://bugzilla.redhat.com/show_bug.cgi?id=2212085
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.