What is CVE-2019-19614?

CVE-2019-19614 is a high-severity vulnerability in Halvotec Raquest, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.5/10. Published 2020-03-09.

How severe is CVE-2019-19614?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Halvotec Raquest

CVE-2019-19614

An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an identical password. Fixed in Release 10.24.11206.1.

EPSS: 0.012 (66.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Halvotec Raquest — versions 10.23.10801.0
N/a — versions n/a

Weakness classification (CWE)

CWE-74 — Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-19614?: CVE-2019-19614 is a high-severity vulnerability in Halvotec Raquest, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.5/10. Published 2020-03-09.
How severe is CVE-2019-19614?: High severity. CVSS v3 base score is 7.5 out of 10.