ZeroDay Findings
Sign inSign up

Findings

CVE-2023-54356

Kyverno vulnerable due to usage of insecure cipher

Published May 30, 2023 · updated Oct 14, 2026

### Summary Insecure 3DES ciphers are used which may lead to exploitation of the [Sweet32 vulnerability](https://sweet32.info/). Specifically, the ciphers TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) and TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) are allowed. See CVE-2016-2183. This is fixed in Kyverno v1.9.5 and v1.10.0 and no known users have been affected. ### Details The ciphers in affected versions can be read using the following command which uses :

Timeline

Detection, updates, and resolution for this record.

  1. May 30, 2023 · GitHub Advisory Database

    Detected

    ### Summary Insecure 3DES ciphers are used which may lead to exploitation of the [Sweet32 vulnerability](https://sweet32.info/). Specifically, the ciphers TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) and TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) are allowed. See CVE-2016-2183. This is fixed in Kyverno v1.9.5 and v1.10.0 and no known users have been affected. ### Details The ciphers in affected v

  2. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    github.com/kyverno/kyverno fixed in 1.9.5

  3. Oct 14, 2026 · GitHub Advisory Database

    Fix available

    github.com/kyverno/kyverno fixed in 1.9.5

  4. Oct 14, 2026 · GitHub Advisory Database

    Updated

    ### Summary Insecure 3DES ciphers are used which may lead to exploitation of the [Sweet32 vulnerability](https://sweet32.info/). Specifically, the ciphers TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) and TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) are allowed. See CVE-2016-2183. This is fixed in Kyverno v1.9.5 and v1.10.0 and no known users have been affected. ### Details The ciphers in affected v

Affected

  • Go github.com/kyverno/kyverno0 → 1.9.5

Sources

References

CVE-2023-54356 · ZeroDay Findings