Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-3089

Ocp & fips mode

Description

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a openshift

  • 4.12.0unaffected

Red Hat OpenShift Serverless

Default version status: affected

Red Hat OpenShift Service Mesh 2.2.x

Default version status: affected

Red Hat OpenShift Service Mesh 2.3.x

Default version status: affected

Red Hat OpenShift Service Mesh 2.4

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: affected

Red Hat Red Hat JBoss A-MQ Streams

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 3.11

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat Openshift Data Foundation 4

Default version status: affected

Red Hat Red Hat Openshift sandboxed containers

Default version status: affected

Red Hat Red Hat OpenShift Virtualization 4

Default version status: affected

References