CVE-2018-8034

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-8034
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8034.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-8034
Aliases
Downstream
Related
Published
2018-08-01T18:29:00.313Z
Modified
2026-02-14T00:34:14.540909Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

References

Affected packages

Git / github.com/apache/tomcat

Affected ranges

Type
GIT
Repo
https://github.com/apache/tomcat
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29b07def810d335012e738b22ab44d4e232b50d1
Introduced
3c78e95e36268dfb76db1570f0cf49104fa6eabc
Last affected
5eda69269ed3267d9757c0e2efbb86ef8fa8bca9
Introduced
e37b977db6f47e4380ad67114a49e8568951c953
Last affected
18fac60288f15ded6a738066d230cdb6423a5b25
Introduced
fec4a6d1d1f050401aec5c6a3bd0431850472d92
Last affected
d5d8425d6b7784032b5e541626d4e2057ac3a503

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8034.json"