In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
Configuration 1 (hide)
|
History
27 Jan 2026, 16:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json - Vendor Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf - Vendor Advisory | |
| References | () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product | |
| CPE | cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:* |
|
| First Time |
Sick enterprise Analytics
Sick tire Analytics Sick Sick logistic Diagnostic Analytics Sick baggage Analytics Sick package Analytics |
06 Oct 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-06 07:15
Updated : 2026-01-27 16:13
NVD link : CVE-2025-58584
Mitre link : CVE-2025-58584
CVE.ORG link : CVE-2025-58584
JSON object : View
Products Affected
sick
- package_analytics
- logistic_diagnostic_analytics
- tire_analytics
- baggage_analytics
- enterprise_analytics
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings