{"id":"EUVD-2023-60611","enisaUuid":"f9de1bd0-3fb6-3997-9256-ef9b3251e883","description":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","datePublished":"Sep 1, 2026, 11:33:51 AM","dateUpdated":"Oct 8, 2026, 3:21:05 PM","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw\nhttps://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites\n","aliases":"CVE-2023-54356\nGHSA-x85p-7rrx-px32\n","assigner":"VulnCheck","epss":0.2,"enisaIdProduct":[{"id":"4e96a180-f50e-3df9-91ab-94ad0ae1d56a","product":{"name":"kyverno","vendor":{"name":"kyverno"}},"product_version":"0 \u003c1.9.5, 1.10.0"}],"enisaIdVendor":[{"id":"968b41f5-5151-3780-97b7-c7e06d78af1f","vendor":{"name":"kyverno"}}],"enisaIdVulnerability":[{"id":"3a2a92dc-bb35-36ca-9bec-5645eee66792","vulnerability":{"id":"CVE-2023-54356","description":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","datePublished":"Sep 1, 2026, 11:33:51 AM","dateUpdated":"Oct 8, 2026, 3:21:05 PM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw\nhttps://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites\n","enisa_id":"EUVD-2023-60611\n","assigner":"VulnCheck","epss":0.2,"dataProcessed":"Nov 8, 2026, 7:15:17 AM","vulnerabilityProduct":[{"id":"71b4c996-d663-3b2e-9543-571d159f247b","product":{"name":"kyverno","vendor":{"name":"kyverno"}},"product_version":"0 \u003c1.9.5, 1.10.0"}],"vulnerabilityVendor":[{"id":"9ef9723b-820d-3979-8ad4-4042d49718b8","vendor":{"name":"kyverno"}}]}},{"id":"e93a2530-12b5-3d76-9ce1-41c90cc92ef2","vulnerability":{"id":"GHSA-x85p-7rrx-px32","description":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.","datePublished":"Sep 1, 2026, 12:31:49 PM","dateUpdated":"Sep 1, 2026, 12:31:49 PM","baseScore":0.0,"references":"https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-54356\nhttps://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites\n","enisa_id":"EUVD-2023-60611\n","aliases":"CVE-2023-54356\nGHSA-x85p-7rrx-px32\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 2:02:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}