Medium severity5.3NVD Advisory· Published Oct 6, 2025· Updated Jun 17, 2026
CVE-2025-58584
CVE-2025-58584
Description
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
- cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
- (no CPE)range: all versions
- cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
- cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- sick.com/psirtnvdVendor Advisory
- www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.jsonnvdVendor Advisory
- www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdfnvdVendor Advisory
- www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvdUS Government Resource
- www.first.org/cvss/calculator/3.1nvdNot Applicable
- www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfnvdProduct
News mentions
0No linked articles in our index yet.