CVE-2019-19614 - An issue was discovered in Halvotec RAQuest 10.23.10801.0

Back Back to CVE browser

HIGH

An issue was discovered in Halvotec RAQuest 10.23.10801.0

Published Mar 9, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.24%

Description

An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9228
Advisory
https://excellium-services.com/cert-xlm-advisory/
x_refsource_MISCThird Party Advisory
https://excellium-services.com/cert-xlm-advisory/cve-2019-19614/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9228		Advisory
https://excellium-services.com/cert-xlm-advisory/		x_refsource_MISCThird Party Advisory
https://excellium-services.com/cert-xlm-advisory/cve-2019-19614/		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2020

Updated Aug 5, 2024

Reserved Dec 5, 2019

Link CVE-2019-19614

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19614

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 9, 2020

Updated Aug 5, 2024

Link EUVD-2019-9228

GitHub

No data