View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-8019 severity moderate: SUSE including 7 source package names (libtcnative-1-0, libtcnative-1-0-1.2.17-1.12, …), 50 product×package rows across 40 product lines (HPE Helion OpenStack 8, SUSE Enterprise Storage 7, … (40 product lines)): Known Not Affected 40, Fixed 10.
When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS. Users not using OCSP checks are not affected by this vulnerability.