The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

References

bugzilla.redhat.com/show_bug.cgi?id=1607580

www.cve.org/CVERecord?id=CVE-2018-8034 https://nvd.nist.gov/vuln/detail/CVE-2018-8034

openvas 18

veracode 1

f5 1

ubuntucve 1

tomcat 4

osv 9

debian 4

nessus 42

debiancve 1

nvd 1

github 1

prion 1

cvelist 1

cve 1

ibm 5

ubuntu 1

redhat 11

kaspersky 1

amazon 3

thn 1

fedora 2

suse 2

almalinux 1

centos 1

rocky 1

mageia 1

oraclelinux 2

photon 1

symantec 1

oracle 5

openvas

Apache Tomcat 'Hostname Verification' Security Bypass Vulnerability - Linux

2018-08-03 00:00:00

Apache Tomcat 'Hostname Verification' Security Bypass Vulnerability - Windows

2018-08-03 00:00:00

Debian: Security Advisory (DLA-1453-1)

2018-07-29 00:00:00

veracode

Insecure Defaults

2018-07-23 05:27:23

K34468163 : Apache Tomcat vulnerability CVE-2018-8034

2018-09-05 00:00:00

ubuntucve

CVE-2018-8034

2018-07-24 00:00:00

tomcat

Fixed in Apache Tomcat 7.0.90

2018-07-07 00:00:00

Fixed in Apache Tomcat 9.0.10

2018-06-25 00:00:00

Fixed in Apache Tomcat 8.0.53

2018-07-06 00:00:00

osv

tomcat7 - security update

2018-07-30 00:00:00

The host name verification missing in Apache Tomcat

2018-10-17 16:32:43

CVE-2018-8034

2018-08-01 18:29:00

debian

[SECURITY] [DLA 1453-1] tomcat7 security update

2018-07-30 01:43:50

[SECURITY] [DLA 1491-1] tomcat8 security update

2018-09-02 20:26:25

[SECURITY] [DSA 4281-1] tomcat8 security update

2018-08-29 06:29:28

nessus

Apache Tomcat 7.0.41 < 7.0.90 Security Bypass

2019-05-13 00:00:00

Apache Tomcat 7.0.25 < 7.0.90

2024-05-23 00:00:00

Debian DLA-1453-1 : tomcat7 security update

2018-07-30 00:00:00

debiancve

CVE-2018-8034

2018-08-01 18:29:00

nvd

CVE-2018-8034

2018-08-01 18:29:00

github

The host name verification missing in Apache Tomcat

2018-10-17 16:32:43

prion

Design/Logic Flaw

2018-08-01 18:29:00

cvelist

CVE-2018-8034

2018-08-01 18:00:00

cve

CVE-2018-8034

2018-08-01 18:29:00

ibm

Security Bulletin: IBM Integration Bus affected by Apache Tomcat vulnerability CVE-2018-8034

2020-03-23 20:41:52

Security Bulletin: Rational DOORS Web Access is affected by Apache Tomcat vulnerabilities

2018-10-23 17:25:01

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2018-11784, CVE-2018-8034)

2019-02-04 13:05:02

ubuntu

Tomcat vulnerabilities

2018-07-25 00:00:00

redhat

(RHSA-2019:0450) Moderate: Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update

2019-03-04 17:33:34

(RHSA-2019:0130) Moderate: Red Hat JBoss Web Server 3.1 Service Pack 6 security and bug fix update

2019-01-22 13:28:08

(RHSA-2019:0451) Moderate: Red Hat JBoss Web Server 5.0 Service Pack 2 security and bug fix update

2019-03-04 17:33:41

kaspersky

KLA11297 Multiple vulnerabilities in Apache Tomcat

2018-07-22 00:00:00

amazon

Important: tomcat7, tomcat80

2018-08-09 16:10:00

Important: tomcat8

2018-08-09 16:12:00

Important: tomcat

2020-03-09 19:23:00

thn

Apache Tomcat Patches Important Security Vulnerabilities

2018-07-24 11:36:00

fedora

[SECURITY] Fedora 28 Update: tomcat-8.5.32-1.fc28

2018-08-30 04:57:26

[SECURITY] Fedora 28 Update: tomcat-8.5.35-1.fc28

2019-04-03 02:02:31

suse

Security update for tomcat (moderate)

2018-09-17 12:12:40

Security update for tomcat (moderate)

2018-10-06 18:10:05

almalinux

Important: pki-deps:10.6 security update

2019-06-18 16:36:21

centos

tomcat security update

2019-08-30 04:27:31

rocky

pki-deps:10.6 security update

2019-06-18 16:36:21

mageia

Updated tomcat packages fix security vulnerabilities

2018-12-10 00:20:39

oraclelinux

pki-deps:10.6 security update

2019-07-30 00:00:00

tomcat security, bug fix, and enhancement update

2019-08-13 00:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0116

2018-12-26 00:00:00

symantec

Apache Tomcat Vulnerabilities Jan-Aug 2018

2018-10-11 08:01:01

oracle

Oracle Critical Patch Update Advisory - October 2019

2020-01-22 00:00:00

Oracle Critical Patch Update Advisory - July 2019

2019-07-16 00:00:00

Oracle Critical Patch Update Advisory - April 2019

2019-04-16 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.016

Percentile

87.6%

JSON

Related for RH:CVE-2018-8034