csaf_redhat - rhsa-2019

rhsa-2019_1529

Vulnerability from csaf_redhat

Published

2019-06-18 17:22

Modified

2024-11-22 12:10

Summary

Red Hat Security Advisory: pki-deps:10.6 security update

Notes

Topic

An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Red Hat Certificate System. Security Fix(es): * tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up (CVE-2018-8037) * tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins (CVE-2018-8014) * tomcat: Open redirect in default servlet (CVE-2018-11784) * tomcat: Host name verification missing in WebSocket client (CVE-2018-8034) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "The Public Key Infrastructure (PKI) Deps module contains fundamental packages required as dependencies for the pki-core module by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up (CVE-2018-8037)\n\n* tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins (CVE-2018-8014)\n\n* tomcat: Open redirect in default servlet (CVE-2018-11784)\n\n* tomcat: Host name verification missing in WebSocket client (CVE-2018-8034)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2019:1529",
            url: "https://access.redhat.com/errata/RHSA-2019:1529",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#important",
            url: "https://access.redhat.com/security/updates/classification/#important",
         },
         {
            category: "external",
            summary: "1579611",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1579611",
         },
         {
            category: "external",
            summary: "1607580",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1607580",
         },
         {
            category: "external",
            summary: "1607582",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1607582",
         },
         {
            category: "external",
            summary: "1636512",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1636512",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1529.json",
         },
      ],
      title: "Red Hat Security Advisory: pki-deps:10.6 security update",
      tracking: {
         current_release_date: "2024-11-22T12:10:30+00:00",
         generator: {
            date: "2024-11-22T12:10:30+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2019:1529",
         initial_release_date: "2019-06-18T17:22:10+00:00",
         revision_history: [
            {
               date: "2019-06-18T17:22:10+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2019-06-18T17:22:10+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T12:10:30+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux AppStream (v. 8)",
                        product: {
                           name: "Red Hat Enterprise Linux AppStream (v. 8)",
                           product_id: "AppStream-8.0.0.Z",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:8::appstream",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "pki-deps:10.6:8000020190524054914:55190bc5",
                        product: {
                           name: "pki-deps:10.6:8000020190524054914:55190bc5",
                           product_id: "pki-deps:10.6:8000020190524054914:55190bc5",
                           product_identification_helper: {
                              purl: "pkg:rpmmod/redhat/pki-deps@10.6:8000020190524054914:55190bc5",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bea-stax-api@1.2.0-16.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb-core@2.2.11-11.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb-runtime@2.2.11-11.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb-txw2@2.2.11-11.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-annotations@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-core@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-databind@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-jaxrs-json-provider@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-jaxrs-providers@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.7.6-4.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/javassist-javadoc@3.18.1-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/pki-servlet-4.0-api@9.0.7-14.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/pki-servlet-container@9.0.7-14.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/resteasy@3.0.26-3.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/slf4j-jdk14@1.7.25-4.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                        product: {
                           name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                           product_id: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/apache-commons-collections@3.2.2-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/apache-commons-lang@2.6-21.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/bea-stax@1.2.0-16.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-fastinfoset@1.2.13-9.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb@2.2.11-11.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/glassfish-jaxb-api@2.2.12-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-annotations@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-core@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-databind@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-jaxrs-providers@2.9.8-1.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jackson-module-jaxb-annotations@2.7.6-4.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/jakarta-commons-httpclient@3.1-28.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/javassist@3.18.1-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/pki-servlet-container@9.0.7-14.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/relaxngDatatype@2011.1-7.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/resteasy@3.0.26-3.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/slf4j@1.7.25-4.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/stax-ex@1.7.7-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/velocity@1.7-24.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xalan-j2@2.7.1-38.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xerces-j2@2.11.0-34.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xml-commons-apis@1.4.01-25.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xml-commons-resolver@1.2-26.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xmlstreambuffer@1.5.4-8.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
                        product: {
                           name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
                           product_id: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/xsom@0-19.20110809svn.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                        product: {
                           name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_id: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                        product: {
                           name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_id: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                        product: {
                           name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_id: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                        product: {
                           name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_id: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                        product: {
                           name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_id: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                        product: {
                           name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_id: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                        product: {
                           name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_id: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                        product: {
                           name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_id: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=aarch64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                        product: {
                           name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_id: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                        product: {
                           name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_id: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                        product: {
                           name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_id: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                        product: {
                           name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_id: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=ppc64le",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                        product: {
                           name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_id: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-debugsource@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                        product: {
                           name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_id: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python-nss-doc@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                        product: {
                           name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_id: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                        product: {
                           name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_id: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/python3-nss-debuginfo@1.0.1-10.module%2Bel8.0.0%2B3248%2B9d514f3b?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
            },
            product_reference: "pki-deps:10.6:8000020190524054914:55190bc5",
            relates_to_product_reference: "AppStream-8.0.0.Z",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            },
            product_reference: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            },
            product_reference: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            },
            product_reference: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            },
            product_reference: "python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            },
            product_reference: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            },
            product_reference: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            },
            product_reference: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            },
            product_reference: "python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            },
            product_reference: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            },
            product_reference: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            },
            product_reference: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            },
            product_reference: "python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            },
            product_reference: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            },
            product_reference: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            },
            product_reference: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64 as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            },
            product_reference: "python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
            },
            product_reference: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src as a component of pki-deps:10.6:8000020190524054914:55190bc5 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            },
            product_reference: "xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            relates_to_product_reference: "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2018-8014",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         discovery_date: "2018-05-18T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1579611",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-8014",
            },
            {
               category: "external",
               summary: "RHBZ#1579611",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1579611",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-8014",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-8014",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-8014",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-8014",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.89",
               url: "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.89",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.53",
               url: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.53",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.32",
               url: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.32",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.9",
               url: "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.9",
            },
         ],
         release_date: "2018-05-17T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2019-06-18T17:22:10+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
            {
               category: "workaround",
               details: "When using the CORS filter, it is recommended to configure it explicitly for your environment.  In particular, the combination of `cors.allowed.origins = *` and `cors.support.credentials = True` should be avoided as this  can leave your application vulnerable to cross-site scripting (XSS). For details on configuring CORS filter, please refer to https://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#CORS_Filter",
               product_ids: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins",
      },
      {
         cve: "CVE-2018-8034",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         discovery_date: "2018-07-22T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1607580",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: Host name verification missing in WebSocket client",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Tomcat 6, and Red Hat products shipping it, are not affected by this CVE. Tomcat 7, 8, and 9, as well as Red Hat Products shipping them, are affected. Affected products, including Red Hat JBoss Web Server 3 and 5, Enterprise Application Server 6, and Fuse 7, may provide fixes for this issue in a future release.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-8034",
            },
            {
               category: "external",
               summary: "RHBZ#1607580",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1607580",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-8034",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-8034",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-8034",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-8034",
            },
         ],
         release_date: "2018-07-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2019-06-18T17:22:10+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "tomcat: Host name verification missing in WebSocket client",
      },
      {
         cve: "CVE-2018-8037",
         discovery_date: "2018-07-22T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1607582",
            },
         ],
         notes: [
            {
               category: "description",
               text: "If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-8037",
            },
            {
               category: "external",
               summary: "RHBZ#1607582",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1607582",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-8037",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-8037",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-8037",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-8037",
            },
         ],
         release_date: "2018-07-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2019-06-18T17:22:10+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 9.1,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up",
      },
      {
         cve: "CVE-2018-11784",
         cwe: {
            id: "CWE-99",
            name: "Improper Control of Resource Identifiers ('Resource Injection')",
         },
         discovery_date: "2018-10-03T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1636512",
            },
         ],
         notes: [
            {
               category: "description",
               text: "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "tomcat: Open redirect in default servlet",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
               "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-11784",
            },
            {
               category: "external",
               summary: "RHBZ#1636512",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1636512",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-11784",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-11784",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-11784",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-11784",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.91",
               url: "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.91",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.34",
               url: "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.34",
            },
            {
               category: "external",
               summary: "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.12",
               url: "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.12",
            },
         ],
         release_date: "2018-10-03T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2019-06-18T17:22:10+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-collections-0:3.2.2-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:apache-commons-lang-0:2.6-21.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:bea-stax-api-0:1.2.0-16.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-fastinfoset-0:1.2.13-9.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-api-0:2.2.12-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-core-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-runtime-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:glassfish-jaxb-txw2-0:2.2.11-11.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-annotations-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-core-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-databind-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-json-provider-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-jaxrs-providers-0:2.9.8-1.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jackson-module-jaxb-annotations-0:2.7.6-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:jakarta-commons-httpclient-1:3.1-28.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:javassist-javadoc-0:3.18.1-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-4.0-api-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:pki-servlet-container-1:9.0.7-14.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-debugsource-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python-nss-doc-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.aarch64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.ppc64le",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.s390x",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:python3-nss-debuginfo-0:1.0.1-10.module+el8.0.0+3248+9d514f3b.x86_64",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:relaxngDatatype-0:2011.1-7.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:resteasy-0:3.0.26-3.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:slf4j-jdk14-0:1.7.25-4.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:stax-ex-0:1.7.7-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:velocity-0:1.7-24.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xalan-j2-0:2.7.1-38.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xerces-j2-0:2.11.0-34.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-apis-0:1.4.01-25.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xml-commons-resolver-0:1.2-26.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xmlstreambuffer-0:1.5.4-8.module+el8.0.0+3248+9d514f3b.src",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.noarch",
                  "AppStream-8.0.0.Z:pki-deps:10.6:8000020190524054914:55190bc5:xsom-0:0-19.20110809svn.module+el8.0.0+3248+9d514f3b.src",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "tomcat: Open redirect in default servlet",
      },
   ],
}

cve-2018-8014

Vulnerability from cvelistv5

Published

2018-05-16 16:00

Modified

2024-08-05 06:46

Severity ?

Summary

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.

References

▼	URL	Tags
	http://tomcat.apache.org/security-9.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:0451	vendor-advisory, x_refsource_REDHAT
	http://tomcat.apache.org/security-7.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2469	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041888	vdb-entry, x_refsource_SECTRACK
	https://usn.ubuntu.com/3665-1/	vendor-advisory, x_refsource_UBUNTU
	http://tomcat.apache.org/security-8.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2470	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20181018-0002/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:0450	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/fbfb713e4f8a4c0f81089b89450828011343593800cae3fb629192b1%40%3Cannounce.tomcat.apache.org%3E	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104203	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1040998	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:3768	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:1529	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:2205	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/08/msg00015.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2019/dsa-4596	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Dec/43	mailing-list, x_refsource_BUGTRAQ
	https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Tomcat	Version: 9.0.0.M1 to 9.0.8 Version: 8.5.0 to 8.5.31 Version: 8.0.0.RC1 to 8.0.52 Version: 7.0.41 to 7.0.88

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T06:46:11.468Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://tomcat.apache.org/security-9.html",
               },
               {
                  name: "RHSA-2019:0451",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0451",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://tomcat.apache.org/security-7.html",
               },
               {
                  name: "RHSA-2018:2469",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2469",
               },
               {
                  name: "1041888",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1041888",
               },
               {
                  name: "USN-3665-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3665-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://tomcat.apache.org/security-8.html",
               },
               {
                  name: "RHSA-2018:2470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2470",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20181018-0002/",
               },
               {
                  name: "RHSA-2019:0450",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0450",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/fbfb713e4f8a4c0f81089b89450828011343593800cae3fb629192b1%40%3Cannounce.tomcat.apache.org%3E",
               },
               {
                  name: "[debian-lts-announce] 20180627 [SECURITY] [DLA 1400-1] tomcat7 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
               },
               {
                  name: "104203",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104203",
               },
               {
                  name: "1040998",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1040998",
               },
               {
                  name: "RHSA-2018:3768",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3768",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "RHSA-2019:1529",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1529",
               },
               {
                  name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
               },
               {
                  name: "RHSA-2019:2205",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2205",
               },
               {
                  name: "[debian-lts-announce] 20190813 [SECURITY] [DLA 1883-1] tomcat8 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/08/msg00015.html",
               },
               {
                  name: "DSA-4596",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4596",
               },
               {
                  name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Dec/43",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Apache Tomcat",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     status: "affected",
                     version: "9.0.0.M1 to 9.0.8",
                  },
                  {
                     status: "affected",
                     version: "8.5.0 to 8.5.31",
                  },
                  {
                     status: "affected",
                     version: "8.0.0.RC1 to 8.0.52",
                  },
                  {
                     status: "affected",
                     version: "7.0.41 to 7.0.88",
                  },
               ],
            },
         ],
         datePublic: "2018-05-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-15T21:06:47",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://tomcat.apache.org/security-9.html",
            },
            {
               name: "RHSA-2019:0451",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0451",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://tomcat.apache.org/security-7.html",
            },
            {
               name: "RHSA-2018:2469",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2469",
            },
            {
               name: "1041888",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1041888",
            },
            {
               name: "USN-3665-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3665-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://tomcat.apache.org/security-8.html",
            },
            {
               name: "RHSA-2018:2470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2470",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20181018-0002/",
            },
            {
               name: "RHSA-2019:0450",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0450",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://lists.apache.org/thread.html/fbfb713e4f8a4c0f81089b89450828011343593800cae3fb629192b1%40%3Cannounce.tomcat.apache.org%3E",
            },
            {
               name: "[debian-lts-announce] 20180627 [SECURITY] [DLA 1400-1] tomcat7 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
            },
            {
               name: "104203",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104203",
            },
            {
               name: "1040998",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1040998",
            },
            {
               name: "RHSA-2018:3768",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3768",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "RHSA-2019:1529",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
            {
               name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
            },
            {
               name: "RHSA-2019:2205",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2205",
            },
            {
               name: "[debian-lts-announce] 20190813 [SECURITY] [DLA 1883-1] tomcat8 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/08/msg00015.html",
            },
            {
               name: "DSA-4596",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4596",
            },
            {
               name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Dec/43",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@apache.org",
               ID: "CVE-2018-8014",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Apache Tomcat",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "9.0.0.M1 to 9.0.8",
                                       },
                                       {
                                          version_value: "8.5.0 to 8.5.31",
                                       },
                                       {
                                          version_value: "8.0.0.RC1 to 8.0.52",
                                       },
                                       {
                                          version_value: "7.0.41 to 7.0.88",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Apache Software Foundation",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "http://tomcat.apache.org/security-9.html",
                     refsource: "CONFIRM",
                     url: "http://tomcat.apache.org/security-9.html",
                  },
                  {
                     name: "RHSA-2019:0451",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0451",
                  },
                  {
                     name: "http://tomcat.apache.org/security-7.html",
                     refsource: "CONFIRM",
                     url: "http://tomcat.apache.org/security-7.html",
                  },
                  {
                     name: "RHSA-2018:2469",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2469",
                  },
                  {
                     name: "1041888",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1041888",
                  },
                  {
                     name: "USN-3665-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3665-1/",
                  },
                  {
                     name: "http://tomcat.apache.org/security-8.html",
                     refsource: "CONFIRM",
                     url: "http://tomcat.apache.org/security-8.html",
                  },
                  {
                     name: "RHSA-2018:2470",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2470",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20181018-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20181018-0002/",
                  },
                  {
                     name: "RHSA-2019:0450",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0450",
                  },
                  {
                     name: "https://lists.apache.org/thread.html/fbfb713e4f8a4c0f81089b89450828011343593800cae3fb629192b1@%3Cannounce.tomcat.apache.org%3E",
                     refsource: "CONFIRM",
                     url: "https://lists.apache.org/thread.html/fbfb713e4f8a4c0f81089b89450828011343593800cae3fb629192b1@%3Cannounce.tomcat.apache.org%3E",
                  },
                  {
                     name: "[debian-lts-announce] 20180627 [SECURITY] [DLA 1400-1] tomcat7 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html",
                  },
                  {
                     name: "104203",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104203",
                  },
                  {
                     name: "1040998",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1040998",
                  },
                  {
                     name: "RHSA-2018:3768",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3768",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "RHSA-2019:1529",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1529",
                  },
                  {
                     name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E",
                  },
                  {
                     name: "RHSA-2019:2205",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2205",
                  },
                  {
                     name: "[debian-lts-announce] 20190813 [SECURITY] [DLA 1883-1] tomcat8 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/08/msg00015.html",
                  },
                  {
                     name: "DSA-4596",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4596",
                  },
                  {
                     name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Dec/43",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2018-8014",
      datePublished: "2018-05-16T16:00:00",
      dateReserved: "2018-03-09T00:00:00",
      dateUpdated: "2024-08-05T06:46:11.468Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-8034

Vulnerability from cvelistv5

Published

2018-08-01 18:00

Modified

2024-10-21 16:09

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

References

▼	URL	Tags
	https://usn.ubuntu.com/3723-1/	vendor-advisory, x_refsource_UBUNTU
	http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722091057.GA70283%40minotaur.apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:0451	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/07/msg00047.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4281	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1041374	vdb-entry, x_refsource_SECTRACK
	https://security.netapp.com/advisory/ntap-20180817-0001/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:0131	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:0130	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:0450	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/104895	vdb-entry, x_refsource_BID
	https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:1160	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1162	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1159	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1161	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:1529	vendor-advisory, x_refsource_REDHAT
	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
	https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:2205	vendor-advisory, x_refsource_REDHAT
	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2019:3892	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Tomcat	Version: 9.0.0.M1 to 9.0.9 Version: 8.5.0 to 8.5.31 Version: 8.0.0.RC1 to 8.0.52 Version: 7.0.35 to 7.0.88

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T06:46:12.214Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-3723-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3723-1/",
               },
               {
                  name: "[www-announce] 20180722 [SECURITY] CVE-2018-8034 Apache Tomcat - Security Constraint Bypass",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722091057.GA70283%40minotaur.apache.org%3E",
               },
               {
                  name: "RHSA-2019:0451",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0451",
               },
               {
                  name: "[debian-lts-announce] 20180730 [SECURITY] [DLA 1453-1] tomcat7 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/07/msg00047.html",
               },
               {
                  name: "DSA-4281",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4281",
               },
               {
                  name: "1041374",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1041374",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
               },
               {
                  name: "RHSA-2019:0131",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0131",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
               },
               {
                  name: "RHSA-2019:0130",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0130",
               },
               {
                  name: "RHSA-2019:0450",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0450",
               },
               {
                  name: "[debian-lts-announce] 20180902 [SECURITY] [DLA 1491-1] tomcat8 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html",
               },
               {
                  name: "104895",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104895",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
               },
               {
                  name: "RHSA-2019:1160",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1160",
               },
               {
                  name: "RHSA-2019:1162",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1162",
               },
               {
                  name: "RHSA-2019:1159",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1159",
               },
               {
                  name: "RHSA-2019:1161",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1161",
               },
               {
                  name: "RHSA-2019:1529",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1529",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
               },
               {
                  name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
               },
               {
                  name: "RHSA-2019:2205",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2205",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
               },
               {
                  name: "RHSA-2019:3892",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3892",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 7.5,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2018-8034",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-15T17:30:15.701472Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-295",
                        description: "CWE-295 Improper Certificate Validation",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-21T16:09:49.791Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Apache Tomcat",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     status: "affected",
                     version: "9.0.0.M1 to 9.0.9",
                  },
                  {
                     status: "affected",
                     version: "8.5.0 to 8.5.31",
                  },
                  {
                     status: "affected",
                     version: "8.0.0.RC1 to 8.0.52",
                  },
                  {
                     status: "affected",
                     version: "7.0.35 to 7.0.88",
                  },
               ],
            },
         ],
         datePublic: "2018-07-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Security Constraint Bypass",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-15T21:06:47",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               name: "USN-3723-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3723-1/",
            },
            {
               name: "[www-announce] 20180722 [SECURITY] CVE-2018-8034 Apache Tomcat - Security Constraint Bypass",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722091057.GA70283%40minotaur.apache.org%3E",
            },
            {
               name: "RHSA-2019:0451",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0451",
            },
            {
               name: "[debian-lts-announce] 20180730 [SECURITY] [DLA 1453-1] tomcat7 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/07/msg00047.html",
            },
            {
               name: "DSA-4281",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4281",
            },
            {
               name: "1041374",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1041374",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
            },
            {
               name: "RHSA-2019:0131",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0131",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
            },
            {
               name: "RHSA-2019:0130",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0130",
            },
            {
               name: "RHSA-2019:0450",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0450",
            },
            {
               name: "[debian-lts-announce] 20180902 [SECURITY] [DLA 1491-1] tomcat8 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html",
            },
            {
               name: "104895",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104895",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
            },
            {
               name: "RHSA-2019:1160",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1160",
            },
            {
               name: "RHSA-2019:1162",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1162",
            },
            {
               name: "RHSA-2019:1159",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1159",
            },
            {
               name: "RHSA-2019:1161",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1161",
            },
            {
               name: "RHSA-2019:1529",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
            },
            {
               name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4%40%3Cissues.activemq.apache.org%3E",
            },
            {
               name: "RHSA-2019:2205",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2205",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
            },
            {
               name: "RHSA-2019:3892",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3892",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@apache.org",
               DATE_PUBLIC: "2018-07-22T00:00:00",
               ID: "CVE-2018-8034",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Apache Tomcat",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "9.0.0.M1 to 9.0.9",
                                       },
                                       {
                                          version_value: "8.5.0 to 8.5.31",
                                       },
                                       {
                                          version_value: "8.0.0.RC1 to 8.0.52",
                                       },
                                       {
                                          version_value: "7.0.35 to 7.0.88",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Apache Software Foundation",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Security Constraint Bypass",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-3723-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3723-1/",
                  },
                  {
                     name: "[www-announce] 20180722 [SECURITY] CVE-2018-8034 Apache Tomcat - Security Constraint Bypass",
                     refsource: "MLIST",
                     url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722091057.GA70283@minotaur.apache.org%3E",
                  },
                  {
                     name: "RHSA-2019:0451",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0451",
                  },
                  {
                     name: "[debian-lts-announce] 20180730 [SECURITY] [DLA 1453-1] tomcat7 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/07/msg00047.html",
                  },
                  {
                     name: "DSA-4281",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4281",
                  },
                  {
                     name: "1041374",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1041374",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20180817-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
                  },
                  {
                     name: "RHSA-2019:0131",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0131",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                  },
                  {
                     name: "RHSA-2019:0130",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0130",
                  },
                  {
                     name: "RHSA-2019:0450",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0450",
                  },
                  {
                     name: "[debian-lts-announce] 20180902 [SECURITY] [DLA 1491-1] tomcat8 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/09/msg00001.html",
                  },
                  {
                     name: "104895",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104895",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
                  },
                  {
                     name: "RHSA-2019:1160",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1160",
                  },
                  {
                     name: "RHSA-2019:1162",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1162",
                  },
                  {
                     name: "RHSA-2019:1159",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1159",
                  },
                  {
                     name: "RHSA-2019:1161",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1161",
                  },
                  {
                     name: "RHSA-2019:1529",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1529",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
                  },
                  {
                     name: "[activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E",
                  },
                  {
                     name: "RHSA-2019:2205",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2205",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                  },
                  {
                     name: "RHSA-2019:3892",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3892",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2018-8034",
      datePublished: "2018-08-01T18:00:00Z",
      dateReserved: "2018-03-09T00:00:00",
      dateUpdated: "2024-10-21T16:09:49.791Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-11784

Vulnerability from cvelistv5

Published

2018-10-04 13:00

Modified

2024-09-16 17:04

Severity ?

Summary

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.

References

▼	URL	Tags
	https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html	x_refsource_CONFIRM
	https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20181014-0002/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/105524	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2019:0131	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:0485	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:0130	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3787-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/	vendor-advisory, x_refsource_FEDORA
	https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:1529	vendor-advisory, x_refsource_REDHAT
	https://kc.mcafee.com/corporate/index?page=content&id=SB10284	x_refsource_CONFIRM
	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html	vendor-advisory, x_refsource_SUSE
	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4596	vendor-advisory, x_refsource_DEBIAN
	https://seclists.org/bugtraq/2019/Dec/43	mailing-list, x_refsource_BUGTRAQ
	https://www.oracle.com/security-alerts/cpujan2020.html	x_refsource_MISC
	https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Tomcat	Version: 9.0.0.M1 to 9.0.11 Version: 8.5.0 to 8.5.33 Version: 7.0.23 to 7.0.90

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T08:17:09.268Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
               },
               {
                  name: "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20181014-0002/",
               },
               {
                  name: "105524",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/105524",
               },
               {
                  name: "RHSA-2019:0131",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0131",
               },
               {
                  name: "RHSA-2019:0485",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0485",
               },
               {
                  name: "RHSA-2019:0130",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:0130",
               },
               {
                  name: "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html",
               },
               {
                  name: "USN-3787-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/3787-1/",
               },
               {
                  name: "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "FEDORA-2018-b18f9dd65b",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
               },
               {
                  name: "openSUSE-SU-2019:1547",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",
               },
               {
                  name: "RHSA-2019:1529",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1529",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
               },
               {
                  name: "openSUSE-SU-2019:1814",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
               },
               {
                  name: "DSA-4596",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4596",
               },
               {
                  name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Dec/43",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujan2020.html",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Apache Tomcat",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     status: "affected",
                     version: "9.0.0.M1 to 9.0.11",
                  },
                  {
                     status: "affected",
                     version: "8.5.0 to 8.5.33",
                  },
                  {
                     status: "affected",
                     version: "7.0.23 to 7.0.90",
                  },
               ],
            },
         ],
         datePublic: "2018-10-03T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Open Redirect",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-13T16:06:19",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
            },
            {
               name: "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20181014-0002/",
            },
            {
               name: "105524",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/105524",
            },
            {
               name: "RHSA-2019:0131",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0131",
            },
            {
               name: "RHSA-2019:0485",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0485",
            },
            {
               name: "RHSA-2019:0130",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:0130",
            },
            {
               name: "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html",
            },
            {
               name: "USN-3787-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/3787-1/",
            },
            {
               name: "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "FEDORA-2018-b18f9dd65b",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
            },
            {
               name: "openSUSE-SU-2019:1547",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",
            },
            {
               name: "RHSA-2019:1529",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
            },
            {
               name: "openSUSE-SU-2019:1814",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
            },
            {
               name: "DSA-4596",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4596",
            },
            {
               name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Dec/43",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujan2020.html",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@apache.org",
               DATE_PUBLIC: "2018-10-03T00:00:00",
               ID: "CVE-2018-11784",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Apache Tomcat",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "9.0.0.M1 to 9.0.11",
                                       },
                                       {
                                          version_value: "8.5.0 to 8.5.33",
                                       },
                                       {
                                          version_value: "7.0.23 to 7.0.90",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Apache Software Foundation",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Open Redirect",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
                     refsource: "CONFIRM",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
                  },
                  {
                     name: "[announce] 20181003 [SECURITY] CVE-2018-11784 Apache Tomcat - Open Redirect",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75@%3Cannounce.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20181014-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20181014-0002/",
                  },
                  {
                     name: "105524",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/105524",
                  },
                  {
                     name: "RHSA-2019:0131",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0131",
                  },
                  {
                     name: "RHSA-2019:0485",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0485",
                  },
                  {
                     name: "RHSA-2019:0130",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:0130",
                  },
                  {
                     name: "[debian-lts-announce] 20181014 [SECURITY] [DLA 1544-1] tomcat7 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00005.html",
                  },
                  {
                     name: "USN-3787-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/3787-1/",
                  },
                  {
                     name: "[debian-lts-announce] 20181015 [SECURITY] [DLA 1545-1] tomcat8 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2018/10/msg00006.html",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "FEDORA-2018-b18f9dd65b",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP/",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
                  },
                  {
                     name: "openSUSE-SU-2019:1547",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",
                  },
                  {
                     name: "RHSA-2019:1529",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1529",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
                  },
                  {
                     name: "openSUSE-SU-2019:1814",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                  },
                  {
                     name: "DSA-4596",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4596",
                  },
                  {
                     name: "20191229 [SECURITY] [DSA 4596-1] tomcat8 security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Dec/43",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujan2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujan2020.html",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2018-11784",
      datePublished: "2018-10-04T13:00:00Z",
      dateReserved: "2018-06-05T00:00:00",
      dateUpdated: "2024-09-16T17:04:04.205Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-8037

Vulnerability from cvelistv5

Published

2018-08-02 14:00

Modified

2024-09-16 17:07

Severity ?

Summary

If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.

References

▼	URL	Tags
	http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1041376	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/104894	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4281	vendor-advisory, x_refsource_DEBIAN
	https://security.netapp.com/advisory/ntap-20180817-0001/	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
	http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4d-4e81-e7f8-b81d-1bb4c575aa33%40apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2867	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2868	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:1529	vendor-advisory, x_refsource_REDHAT
	https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e4735dfb522d39%40%3Cusers.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac8f619bf5c044c%40%3Cusers.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC
	https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Tomcat	Version: 9.0.0.M9 to 9.0.9 Version: 8.5.5 to 8.5.31

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T06:46:13.444Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[www-announce] 20180722 [SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E",
               },
               {
                  name: "1041376",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1041376",
               },
               {
                  name: "104894",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/104894",
               },
               {
                  name: "DSA-4281",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2018/dsa-4281",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
               },
               {
                  name: "[www-announce] 20180809 [UPDATE][SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4d-4e81-e7f8-b81d-1bb4c575aa33%40apache.org%3E",
               },
               {
                  name: "RHSA-2018:2867",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2867",
               },
               {
                  name: "RHSA-2018:2868",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:2868",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "RHSA-2019:1529",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:1529",
               },
               {
                  name: "[tomcat-users] 20191001 Additional Information on Apache Tomcat CVE-2018-8037",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e4735dfb522d39%40%3Cusers.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-users] 20191001 Re: Additional Information on Apache Tomcat CVE-2018-8037",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac8f619bf5c044c%40%3Cusers.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Apache Tomcat",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     status: "affected",
                     version: "9.0.0.M9 to 9.0.9",
                  },
                  {
                     status: "affected",
                     version: "8.5.5 to 8.5.31",
                  },
               ],
            },
         ],
         datePublic: "2018-07-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Information Disclosure",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-15T21:06:47",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               name: "[www-announce] 20180722 [SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E",
            },
            {
               name: "1041376",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1041376",
            },
            {
               name: "104894",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/104894",
            },
            {
               name: "DSA-4281",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2018/dsa-4281",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
            },
            {
               name: "[www-announce] 20180809 [UPDATE][SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4d-4e81-e7f8-b81d-1bb4c575aa33%40apache.org%3E",
            },
            {
               name: "RHSA-2018:2867",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2867",
            },
            {
               name: "RHSA-2018:2868",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:2868",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "RHSA-2019:1529",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:1529",
            },
            {
               name: "[tomcat-users] 20191001 Additional Information on Apache Tomcat CVE-2018-8037",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e4735dfb522d39%40%3Cusers.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-users] 20191001 Re: Additional Information on Apache Tomcat CVE-2018-8037",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac8f619bf5c044c%40%3Cusers.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@apache.org",
               DATE_PUBLIC: "2018-07-22T00:00:00",
               ID: "CVE-2018-8037",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Apache Tomcat",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "9.0.0.M9 to 9.0.9",
                                       },
                                       {
                                          version_value: "8.5.5 to 8.5.31",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Apache Software Foundation",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NIO2 connectors that did not correctly track the closure of the connection when an async request was completed by the application and timed out by the container at the same time. This could also result in a user seeing a response intended for another user. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.9 and 8.5.5 to 8.5.31.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Information Disclosure",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[www-announce] 20180722 [SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
                     refsource: "MLIST",
                     url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C20180722090623.GA92700%40minotaur.apache.org%3E",
                  },
                  {
                     name: "1041376",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1041376",
                  },
                  {
                     name: "104894",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/104894",
                  },
                  {
                     name: "DSA-4281",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2018/dsa-4281",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20180817-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20180817-0001/",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
                  },
                  {
                     name: "[www-announce] 20180809 [UPDATE][SECURITY] CVE-2018-8037 Apache Tomcat - Information Disclosure",
                     refsource: "MLIST",
                     url: "http://mail-archives.us.apache.org/mod_mbox/www-announce/201808.mbox/%3C0c616b4d-4e81-e7f8-b81d-1bb4c575aa33%40apache.org%3E",
                  },
                  {
                     name: "RHSA-2018:2867",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2867",
                  },
                  {
                     name: "RHSA-2018:2868",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:2868",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "RHSA-2019:1529",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:1529",
                  },
                  {
                     name: "[tomcat-users] 20191001 Additional Information on Apache Tomcat CVE-2018-8037",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/2ee3af8a43cb019e7898c9330cc8e73306553a27f2e4735dfb522d39@%3Cusers.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-users] 20191001 Re: Additional Information on Apache Tomcat CVE-2018-8037",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/5d15316dfb4adf75d96d394745f8037533fa3bcc1ac8f619bf5c044c@%3Cusers.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [24/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [28/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2018-8037",
      datePublished: "2018-08-02T14:00:00Z",
      dateReserved: "2018-03-09T00:00:00",
      dateUpdated: "2024-09-16T17:07:40.261Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2019_1529

Vulnerability from csaf_redhat

cve-2018-8014

Vulnerability from cvelistv5

cve-2018-8034

Vulnerability from cvelistv5

cve-2018-11784

Vulnerability from cvelistv5

cve-2018-8037

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature