Nixpkgs Security Tracker

Untriaged

Permalink CVE-2023-3089

7.0 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months, 1 week ago

Ocp & fips mode

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

References

https://access.redhat.com/security/cve/CVE-2023-3089 x_refsource_REDHAT vdb-entry
RHBZ#2212085 issue-tracking x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3089 x_refsource_REDHAT vdb-entry x_transferred
RHBZ#2212085 issue-tracking x_refsource_REDHAT x_transferred
https://access.redhat.com/security/cve/CVE-2023-3089 x_refsource_REDHAT vdb-entry
RHBZ#2212085 issue-tracking x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-3089 x_refsource_REDHAT vdb-entry x_transferred
RHBZ#2212085 issue-tracking x_refsource_REDHAT x_transferred

Affected products

openshift

==4.12.0

(as-yet-unknown)

openshift-ansible

openshift-golang-builder-container

Matching in nixpkgs

pkgs.openshift

Build, deploy, and manage your applications with Docker and Kubernetes

nixos-unstable -
- nixpkgs-unstable 4.16.0

pkgs.python312Packages.openshift

Python client for the OpenShift API

nixos-unstable -
- nixpkgs-unstable 0.13.2

pkgs.python313Packages.openshift

Python client for the OpenShift API

nixos-unstable -
- nixpkgs-unstable 0.13.2

pkgs.python312Packages.azure-mgmt-redhatopenshift

Microsoft Azure Red Hat Openshift Management Client Library for Python

nixos-unstable -
- nixpkgs-unstable 2.0.0

pkgs.python313Packages.azure-mgmt-redhatopenshift