[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhDJfrbGledOZCsBFjS4XXkoSeI1T-d3JI5FsSJYu0gQ":3,"g5a-risk:CVE-2019-17598":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":59,"weaknesses":60,"weaknessesCount":48,"isActivelyExploited":69,"cisaInfo":26,"otxData":26,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":110,"notableEvents":111},"CVE-2019-17598","What is CVE-2019-17598?","An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.","An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may som...","2019-11-05T15:15:12.153","2020-08-24T17:37:01.14",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.00704,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"lightbend","play_framework","*","cpe:2.3:a:lightbend:play_framework:*:*:*:*:*:*:*:*",1,[50,56],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.playframework.com\u002Fsecurity\u002Fvulnerability","Playframework",[54,55],"Release Notes","Vendor Advisory",{"url":57,"source":52,"tags":58},"https:\u002F\u002Fwww.playframework.com\u002Fsecurity\u002Fvulnerability\u002FCVE-2019-17598-PlayWSHttpConnectAuthorizationHeaders",[55],2,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2019-17598? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-17598, a high severity cyber security vulnerability from 2019. An issue was discovered in Lightbend Play Framework 2.5.x t...","CVE-2019-17598, CVE-2019-17598 vulnerability, CVE-2019-17598 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, lightbend security, play_framework vulnerability","\u002Fwhat-is\u002Fcve-2019-17598",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-17598","Cybersecurity","CVE-2019-17598, CVE-2019-17598 vulnerability, CVE-2019-17598 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":26,"Negate":26,"Nodes":98},[99],{"Operator":100,"Negate":26,"CPEMatch":101},"OR",[102,106],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":103,"VersionStartExcluding":26,"VersionStartIncluding":104,"VersionEndExcluding":26,"VersionEndIncluding":105},"9F1FB742-DADC-4B7E-A652-D57E560FEB9F","2.5.0","2.5.19",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":108,"VersionEndExcluding":26,"VersionEndIncluding":109},"539F3FCE-640A-43E0-8303-B702BF1B95FF","2.6.0","2.6.23",[],[],{"lastModified":11,"cacheTime":113,"version":32},1792364774787,{"score":115,"band":116,"action":117,"scoredAt":118},46,"Medium","Plan remediation","2026-10-16T06:47:12.544458+00:00"]