CVE-2025-58578: Unlimited user creation by authorized users
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58578?
CVE-2025-58578 is considered a high severity vulnerability due to its potential for unauthorized user account creation.
How do I fix CVE-2025-58578?
To fix CVE-2025-58578, implement restrictions on the API endpoint to limit the number of user accounts that can be created.
Who is affected by CVE-2025-58578?
CVE-2025-58578 affects users of the SICK Enterprise Analytics software where authorized users can exploit the vulnerability.
What are the risks associated with CVE-2025-58578?
The risks of CVE-2025-58578 include potential unauthorized access and account misuse due to uncontrolled user account creation.
How can I mitigate CVE-2025-58578?
Mitigate CVE-2025-58578 by implementing proper authentication checks and rate limiting on the API used for account creation.