It exists that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
hawt hawtio 1.4.0 |
||
redhat jboss fuse 6.3 |
Vulmon