[
https://issues.apache.org/jira/browse/DRILL-8521?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Maksym Rymar updated DRILL-8521:
--------------------------------
Summary: Update Parquet due to CVE (was: Change session cookie name to
avoid conflicts)
> Update Parquet due to CVE
> -------------------------
>
> Key: DRILL-8521
> URL: https://issues.apache.org/jira/browse/DRILL-8521
> Project: Apache Drill
> Issue Type: Improvement
> Affects Versions: 1.21.2
> Reporter: Maksym Rymar
> Assignee: Maksym Rymar
> Priority: Major
> Fix For: 1.22.0
>
>
> Drill uses Jetty's default cookie name, {{{}JSESSIONID{}}}, to store the user
> session ID.
>
> Because {{JSESSIONID}} is a generic name, multiple web services running on
> the same host can conflict if they use the same cookie name.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
