VDB
GCVE-VVD-MAGEIA-2019-184
GCVE-VVD-MAGEIA-2019-184
Advisory Published
When using an OCSP responder did not correctly handle invalid responses.
This allowed for revoked client certificates to be incorrectly identified.
It was therefore possible for users to authenticate with revoked
certificates when using mutual TLS (CVE-2018-8019).
Did not properly check OCSP pre-produced responses. Revoked client
certificates may have not been properly identified, allowing for users to
authenticate with revoked certificates to connections that require mutual
TLS (CVE-2018-8020).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | tomcat-native | 0 (affected), 1.2.18-1.mga6 (unaffected), 0 (affected), 1.2.18-1.mga6 (unaffected) | — |
| Mageia | python-urllib3 | 0 (affected), 1.24.3-1.1.mga7 (unaffected) | — |
Aliases
Transitive aliases
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.