Oval Definition:oval:com.ubuntu.bionic:def:20188019000
Revision Date:2018-07-31Version:1
Title:CVE-2018-8019 on Ubuntu 18.04 LTS (bionic) - medium.
Description:When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS. Users not using OCSP checks are not affected by this vulnerability.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-8019
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND The vulnerability of the 'tomcat-native' package in bionic is not known (status: 'needs-triage'). It is pending evaluation.
    • BACK