CVE-2018-8020 Apache Tomcat Native Connector - Mishandled OCSP responses can
allow clients to authenticate with revoked certificates
Severity: Important
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat Native 1.2.0 to 1.2.16
Apache Tomcat Native 1.1.23 to 1.1.34
Descript
CVE-2018-8019 Apache Tomcat Native Connector - Mishandled OCSP invalid response
Severity: Moderate
Vendor: The Apache Software Foundation
Versions Affected:
Apache Tomcat Native 1.2.0 to 1.2.16
Apache Tomcat Native 1.1.23 to 1.1.34
Description:
When using an OCSP responder Tomcat Native did not