CVE ID:	CVE-2018-10903
Description:	A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2018.3392.1   1.3.6.1.4.1.25623.1.1.4.2020.0790.1   1.3.6.1.4.1.25623.1.1.4.2020.0792.1   1.3.6.1.4.1.25623.1.0.851959   1.3.6.1.4.1.25623.1.1.10.2018.0429   1.3.6.1.4.1.25623.1.0.843683   1.3.6.1.4.1.25623.1.1.4.2022.4044.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10903 RedHat Security Advisories: RHSA-2018:3600 https://access.redhat.com/errata/RHSA-2018:3600 https://usn.ubuntu.com/3720-1/