VDB

RHSA-2020%3A3842

RHSA-2020%3A3842 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite.

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-console@sha256:1982daa16ec40553b405d5c980dc0db8344e7f525b7177d8cdc7cfde596b33da_amd64 as a component of Red Hat OpenShift Container Platform 4.5*
Red Hatopenshift4/ose-console@sha256:00ff55112f7e9c60ad6f0ca86ef16a923e539483aa995c03015ba2142ddb4f13_ppc64le as a component of Red Hat OpenShift Container Platform 4.5openshift4/ose-console@sha256:00ff55112f7e9c60ad6f0ca86ef16a923e539483aa995c03015ba2142ddb4f13_ppc64le
Red Hatopenshift4/ose-console@sha256:48476fda1a77b0514c238256f39566a8c42f89cb5c75ff37638f38399126d8d0_s390x as a component of Red Hat OpenShift Container Platform 4.5openshift4/ose-console@sha256:48476fda1a77b0514c238256f39566a8c42f89cb5c75ff37638f38399126d8d0_s390x

Timeline

  • Oct 1, 2020 CVE Published
  • Apr 11, 2025 PoC Published
  • Apr 19, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›