Field Assessment
AI analysis pending.
CVE
CVE-2017-2589
Severity
HIGH
CVSS
8.7
EPSS
0.93%
Original Filing — NVD Description
It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.