CVE-2019-19611

—

CVSS 3.1

7.5 high

EPSS

1%p64

Published

Mar 13, 2020 (Mar 13, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session cookie for each user. Fixed in Release 10.24.11206.1

Vendors: halvotec
Products: raquest
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.