CVE-2017-2589

CVE-2017-2589 describes a critical vulnerability in hawtio servlet 1.4 and related Red Hat products, where a shared HttpClient instance for proxying requests leads to all clients sharing the same persistent cookie store. This allows for cross-client cookie exposure. The vulnerability carries a CVSS score of 9.0 (CRITICAL) due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. Despite its severity and significant community discussion (10 mentions), there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB.