An issue exists in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0.
halvotec raquest 10.23.10801.0