{"id":"CVE-2023-54356","title":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints","summary":"Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-326"],"vendor":"kyverno","product":"github.com/kyverno/kyverno","affected":["github.com/kyverno/kyverno < 1.9.5"],"patched":["github.com/kyverno/kyverno 1.9.5"],"published":"2026-09-01","updated":"2026-09-10","sourceUpdated":"2026-09-10T15:43:03.760","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-54356","references":[{"url":"https://github.com/kyverno/kyverno/security/advisories/GHSA-hgv6-w7r3-w4qw","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/kyverno-before-1.9.5-sweet32-medium-strength-cipher-suites","label":"disclosure@vulncheck.com"},{"url":"https://github.com/kyverno/kyverno/pull/7308"},{"url":"https://github.com/kyverno/kyverno"},{"url":"https://github.com/kyverno/kyverno/releases/tag/v1.9.5"}],"tags":["nvd","osv","go"],"epss":0.00147,"epssPercentile":0.04336,"aliases":["GHSA-hgv6-w7r3-w4qw","GO-2023-1804"],"ecosystem":"go","ingestedAt":"2026-09-02T19:31:26.942Z","slug":"CVE-2023-54356","body":"## Overview\n\nKyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over very long-lived TLS connections carrying large volumes of traffic, could allow an attacker to recover small amounts of plaintext. The issue is fixed in Kyverno 1.9.5 and 1.10.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2023-54356)\n\nAffected packages:\n\n- `github.com/kyverno/kyverno < 1.9.5`\n\nPatched in:\n\n- `github.com/kyverno/kyverno 1.9.5`\n\nSource: https://osv.dev/vulnerability/GHSA-hgv6-w7r3-w4qw","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201393,"id":"CVE-2023-54356","ts":1789399362234,"field":"cvss","old":null,"new":"3.7"},{"seq":201392,"id":"CVE-2023-54356","ts":1789399362234,"field":"severity","old":"medium","new":"low"},{"seq":200132,"id":"CVE-2023-54356","ts":1789396684802,"field":"cvss","old":"3.7","new":null},{"seq":200131,"id":"CVE-2023-54356","ts":1789396684802,"field":"severity","old":"low","new":"medium"},{"seq":196928,"id":"CVE-2023-54356","ts":1789384229932,"field":"cvss","old":null,"new":"3.7"},{"seq":196927,"id":"CVE-2023-54356","ts":1789384229932,"field":"severity","old":"medium","new":"low"},{"seq":195855,"id":"CVE-2023-54356","ts":1789383154204,"field":"cvss","old":"3.7","new":null},{"seq":195854,"id":"CVE-2023-54356","ts":1789383154204,"field":"severity","old":"low","new":"medium"},{"seq":194783,"id":"CVE-2023-54356","ts":1789380202776,"field":"cvss","old":null,"new":"3.7"},{"seq":194782,"id":"CVE-2023-54356","ts":1789380202776,"field":"severity","old":"medium","new":"low"},{"seq":193571,"id":"CVE-2023-54356","ts":1789378005632,"field":"cvss","old":"3.7","new":null},{"seq":193570,"id":"CVE-2023-54356","ts":1789378005632,"field":"severity","old":"low","new":"medium"},{"seq":192357,"id":"CVE-2023-54356","ts":1789376119084,"field":"cvss","old":null,"new":"3.7"},{"seq":192356,"id":"CVE-2023-54356","ts":1789376119084,"field":"severity","old":"medium","new":"low"},{"seq":191145,"id":"CVE-2023-54356","ts":1789372854556,"field":"cvss","old":"3.7","new":null},{"seq":191144,"id":"CVE-2023-54356","ts":1789372854556,"field":"severity","old":"low","new":"medium"},{"seq":189929,"id":"CVE-2023-54356","ts":1789369043549,"field":"cvss","old":null,"new":"3.7"},{"seq":189928,"id":"CVE-2023-54356","ts":1789369043549,"field":"severity","old":"medium","new":"low"},{"seq":188717,"id":"CVE-2023-54356","ts":1789367845409,"field":"cvss","old":"3.7","new":null},{"seq":188716,"id":"CVE-2023-54356","ts":1789367845409,"field":"severity","old":"low","new":"medium"},{"seq":187499,"id":"CVE-2023-54356","ts":1789364890712,"field":"cvss","old":null,"new":"3.7"},{"seq":187498,"id":"CVE-2023-54356","ts":1789364890712,"field":"severity","old":"medium","new":"low"},{"seq":186287,"id":"CVE-2023-54356","ts":1789362777957,"field":"cvss","old":"3.7","new":null},{"seq":186286,"id":"CVE-2023-54356","ts":1789362777957,"field":"severity","old":"low","new":"medium"},{"seq":185072,"id":"CVE-2023-54356","ts":1789360876991,"field":"cvss","old":null,"new":"3.7"},{"seq":185071,"id":"CVE-2023-54356","ts":1789360876991,"field":"severity","old":"medium","new":"low"},{"seq":183860,"id":"CVE-2023-54356","ts":1789357685957,"field":"cvss","old":"3.7","new":null},{"seq":183859,"id":"CVE-2023-54356","ts":1789357685957,"field":"severity","old":"low","new":"medium"},{"seq":182112,"id":"CVE-2023-54356","ts":1789354014365,"field":"cvss","old":null,"new":"3.7"},{"seq":182111,"id":"CVE-2023-54356","ts":1789354014365,"field":"severity","old":"medium","new":"low"},{"seq":180905,"id":"CVE-2023-54356","ts":1789352728634,"field":"cvss","old":"3.7","new":null},{"seq":180904,"id":"CVE-2023-54356","ts":1789352728634,"field":"severity","old":"low","new":"medium"},{"seq":179698,"id":"CVE-2023-54356","ts":1789349885577,"field":"cvss","old":null,"new":"3.7"},{"seq":179697,"id":"CVE-2023-54356","ts":1789349885577,"field":"severity","old":"medium","new":"low"},{"seq":178491,"id":"CVE-2023-54356","ts":1789347554710,"field":"cvss","old":"3.7","new":null},{"seq":178490,"id":"CVE-2023-54356","ts":1789347554710,"field":"severity","old":"low","new":"medium"},{"seq":177284,"id":"CVE-2023-54356","ts":1789346070478,"field":"cvss","old":null,"new":"3.7"},{"seq":177283,"id":"CVE-2023-54356","ts":1789346070478,"field":"severity","old":"medium","new":"low"},{"seq":176077,"id":"CVE-2023-54356","ts":1789342527852,"field":"cvss","old":"3.7","new":null},{"seq":176076,"id":"CVE-2023-54356","ts":1789342527852,"field":"severity","old":"low","new":"medium"},{"seq":175863,"id":"CVE-2023-54356","ts":1789342149619,"field":"cvss","old":null,"new":"3.7"},{"seq":175862,"id":"CVE-2023-54356","ts":1789342149619,"field":"severity","old":"medium","new":"low"},{"seq":175401,"id":"CVE-2023-54356","ts":1789338136754,"field":"cvss","old":"3.7","new":null},{"seq":175400,"id":"CVE-2023-54356","ts":1789338136754,"field":"severity","old":"low","new":"medium"},{"seq":174196,"id":"CVE-2023-54356","ts":1789334499581,"field":"cvss","old":null,"new":"3.7"},{"seq":174195,"id":"CVE-2023-54356","ts":1789334499581,"field":"severity","old":"medium","new":"low"},{"seq":173010,"id":"CVE-2023-54356","ts":1789333100853,"field":"cvss","old":"3.7","new":null},{"seq":173009,"id":"CVE-2023-54356","ts":1789333100853,"field":"severity","old":"low","new":"medium"},{"seq":171824,"id":"CVE-2023-54356","ts":1789330822232,"field":"cvss","old":null,"new":"3.7"},{"seq":171823,"id":"CVE-2023-54356","ts":1789330822232,"field":"severity","old":"medium","new":"low"}]}