Vulnetix
Try Vulnetix Request Demo
CVE-2017-2589 PUBLISHED CVSS 8.699999809265137 HIGH

It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.

EPSS 0.17% · 37.6th percentile

Risk Scores

CVSS v3.0
8.699999809265137
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS Score
0.17%
37.6th percentile

Affected Products

VendorProductVersions
redhatjboss_fuse6.3
Mavenio.hawt:project0
hawthawtio1.4.0
Red Hathawtio1.4

Timeline

References

Open in Interactive Console →