Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-2589 Details

Description

It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://access.redhat.com/errata/RHSA-2017:1832 CVEVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589 CVEIssue TrackingVendor Advisory
https://access.redhat.com/errata/RHSA-2017:1832 [email protected]Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589 [email protected]Issue TrackingVendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
NVD-CWE-noinfoInsufficient Information to Classify Weakness[email protected]
CWE-285Improper Authorization[email protected]

Affected Products

ProductVersions
hawt hawtio
1.4.0

CPE

  • cpe:2.3:a:hawt:hawtio:1.4.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
redhat jboss fuse
6.3

CPE

  • cpe:2.3:a:redhat:jboss_fuse:6.3:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-2589
NVD Published Date:
Jul 26, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-2589 Details - Not Deferred