CVE-2019-19199

Name of the Vulnerable Software and Affected Versions REDDOXX MailDepot version 2032 SP2 2.2.1242

Description The issue is related to insufficient session expiration, where tokens are not invalidated upon logout. This can potentially allow unauthorized access to user sessions.

Recommendations For REDDOXX MailDepot version 2032 SP2 2.2.1242, consider implementing a custom session invalidation mechanism upon user logout as a temporary workaround until a patch is available. Restrict access to sensitive features that rely on session tokens to minimize the risk of exploitation.