[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDF7F7VjuFRJDDbtBIiSd9rR1pXNRTS9Hkz-RTa7KB-g":3,"g5a-risk:CVE-2023-3089":213},{"success":4,"data":5,"meta":210},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":86,"references":87,"referencesCount":97,"weaknesses":98,"weaknessesCount":97,"isActivelyExploited":113,"cisaInfo":26,"otxData":26,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":208,"notableEvents":209},"CVE-2023-3089","What is CVE-2023-3089?","A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.","A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic...","2023-07-05T13:15:09.707","2023-11-07T04:17:52.87",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"53f830b8-0a3f-465b-8143-3b8a9948e749","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",7,2.2,4.7,0.0052,[37,37,37,37,37,37,37],"High",[41,46,50,53,56,59,62,64,67,69,72,74,77,79,81,83],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"redhat","openshift_container_platform","4.10","cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":51,"criteria":52,"vulnerable":4},"8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":42,"product":54,"version":44,"criteria":55,"vulnerable":4},"openshift_container_platform_for_linuxone","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":54,"version":57,"criteria":58,"vulnerable":4},"4.11","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.11:*:*:*:*:*:*:*",{"vendor":42,"product":60,"version":44,"criteria":61,"vulnerable":4},"openshift_container_platform_for_power","cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":60,"version":57,"criteria":63,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.11:*:*:*:*:*:*:*",{"vendor":42,"product":65,"version":44,"criteria":66,"vulnerable":4},"openshift_container_platform_ibm_z_systems","cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":65,"version":57,"criteria":68,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.11:*:*:*:*:*:*:*",{"vendor":42,"product":70,"version":44,"criteria":71,"vulnerable":4},"openshift_container_platform_for_arm64","cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.10:*:*:*:*:*:*:*",{"vendor":42,"product":70,"version":57,"criteria":73,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.11:*:*:*:*:*:*:*",{"vendor":42,"product":70,"version":75,"criteria":76,"vulnerable":4},"4.12","cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.12:*:*:*:*:*:*:*",{"vendor":42,"product":54,"version":75,"criteria":78,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:*:*:*:*:*:*:*",{"vendor":42,"product":60,"version":75,"criteria":80,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:*",{"vendor":42,"product":65,"version":75,"criteria":82,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":84,"criteria":85,"vulnerable":4},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",16,[88,93],{"url":89,"source":90,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2023-3089","Red Hat",[92],"Vendor Advisory",{"url":94,"source":90,"tags":95},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2212085",[96,92],"Issue Tracking",2,[99,107],{"id":100,"name":101,"description":102,"extendedDescription":103,"status":104,"abstraction":105,"structure":106},"CWE-521","Weak Password Requirements","The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.","Authentication mechanisms often rely on a memorized secret (also known as a password) to provide an assertion of identity for a user of a system. It is therefore important that this password be of sufficient complexity and impractical for an adversary to guess. The specific requirements around how complex a password needs to be depends on the type of system being protected. Selecting the correct password requirements and enforcing them through implementation are critical to the overall success of the authentication mechanism.","Draft","Base","Simple",{"id":108,"name":109,"description":110,"extendedDescription":111,"status":104,"abstraction":112,"structure":106},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Pillar",false,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2023-3089? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-3089, a high severity cyber security vulnerability from 2023. A compliance problem was found in the Red Hat OpenShift Cont...","CVE-2023-3089, CVE-2023-3089 vulnerability, CVE-2023-3089 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, openshift_container_platform vulnerability, enterprise_linux vulnerability, openshift_container_platform_for_linuxone vulnerability, openshift_container_platform_for_power vulnerability, openshift_container_platform_ibm_z_systems vulnerability","\u002Fwhat-is\u002Fcve-2023-3089",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-3089","Cybersecurity","CVE-2023-3089, CVE-2023-3089 vulnerability, CVE-2023-3089 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141,155,174,182,199],{"Operator":142,"Negate":26,"Nodes":143},"AND",[144,149],{"Operator":145,"Negate":26,"CPEMatch":146},"OR",[147],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0595C9F8-9C7A-4FC1-B7EE-52978A1B1E93",{"Operator":145,"Negate":26,"CPEMatch":150},[151,153],{"Vulnerable":26,"Criteria":49,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Operator":142,"Negate":26,"Nodes":156},[157,171],{"Operator":145,"Negate":26,"CPEMatch":158},[159,161,163,165,167,169],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C7E78C55-45B6-4E01-9773-D3468F8EA9C3",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":162,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6E34F566-0753-43D5-AC76-E47C738C9DD4",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":164,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"54E24055-813B-4E6D-94B7-FAD5F78B8537",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6B2EF9F6-CE0A-48FA-87E5-77F94363B540",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":168,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E58526FB-522F-4AAC-B03C-9CAB443D0CFF",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":170,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"22DFC1BF-2EC4-4102-97D0-BC9F75C94F71",{"Operator":145,"Negate":26,"CPEMatch":172},[173],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Operator":26,"Negate":26,"Nodes":175},[176],{"Operator":145,"Negate":26,"CPEMatch":177},[178,180],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BBDCFC8C-E397-4972-88BE-9911C000EC5E",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C8DC4AA4-6C52-42A4-A314-7E2F4D5AB620",{"Operator":142,"Negate":26,"Nodes":183},[184,194],{"Operator":145,"Negate":26,"CPEMatch":185},[186,188,190,192],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E52D8667-D64B-4E4D-972F-089A2D834C34",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1E5E9340-DD85-4B10-9A1D-9021C95229A9",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2127E592-F973-4244-9793-680736EC5313",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"608FBE62-5A35-4C7A-BBC7-E0D05E09008B",{"Operator":145,"Negate":26,"CPEMatch":195},[196,197],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Vulnerable":26,"Criteria":85,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Operator":142,"Negate":26,"Nodes":200},[201,204],{"Operator":145,"Negate":26,"CPEMatch":202},[203],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Operator":145,"Negate":26,"CPEMatch":205},[206,207],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},{"Vulnerable":26,"Criteria":85,"MatchCriteriaID":198,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},[],[],{"lastModified":11,"cacheTime":211,"version":212},1792254457042,"2.0",{"score":214,"band":215,"action":216,"scoredAt":217},46,"Medium","Plan remediation","2026-10-16T06:58:29.140329+00:00"]