CVE-2017-2589
Last modified
CVE-2017-2589 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.. EPSS estimates a 0.93% chance of exploitation in the next 30 days.
Description
It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.
Metrics
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hawt | Hawtio | 1.4.0 |
| Redhat | Jboss Fuse | 6.3 |
References
- https://access.redhat.com/errata/RHSA-2017:1832Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589Issue Tracking, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2017:1832Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-2589?
How severe is CVE-2017-2589?
How do I fix CVE-2017-2589?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-2583The load_segment_descriptor implementation in arch/x86/kvm/e…
- CVE-2017-2584arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 all…
- CVE-2017-2585Red Hat Keycloak before version 2.5.1 has an implementation …
- CVE-2017-2586A null pointer dereference vulnerability was found in netpbm…3.3
- CVE-2017-2587A memory allocation vulnerability was found in netpbm before…3.3
- CVE-2017-2588Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-2590A vulnerability was found in ipa before 4.4. IdM's ca-del, c…8.1
- CVE-2017-2591389-ds-base before version 1.3.6 is vulnerable to an imprope…3.7
- CVE-2017-2592python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1…5.9
- CVE-2017-2593Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2017-2594hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2…5.4
- CVE-2017-2595It was found that the log file viewer in Red Hat JBoss Enter…7.7
Are you affected by CVE-2017-2589?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST