Ocp & fips mode
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
n/a · openshiftRed Hat · OpenShift ServerlessRed Hat · OpenShift Service Mesh 2.2.xRed Hat · OpenShift Service Mesh 2.3.xRed Hat · OpenShift Service Mesh 2.4Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2Red Hat · Red Hat JBoss A-MQ StreamsRed Hat · Red Hat OpenShift Container Platform 3.11Red Hat · Red Hat OpenShift Container Platform 4Red Hat · Red Hat Openshift Data Foundation 4Red Hat · Red Hat Openshift sandboxed containersRed Hat · Red Hat OpenShift Virtualization 4