CVE-2019-19611

Affected product: Halvotec RaQuest 10.23.10801.0. Vulnerability: an exposed web service allows an anonymous user to access the list of connected users and their session cookies (information disclosure). Root cause / details: the initial documents state the issue but do not provide deeper technica...