CVE-2025-58584: Plain Text Transmission of Username and Password in the URL
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58584?
CVE-2025-58584 is considered a high severity vulnerability due to the potential exposure of sensitive credentials in plain text.
How do I fix CVE-2025-58584?
To fix CVE-2025-58584, ensure that authentication parameters are transmitted over a secure channel like HTTPS instead of in the URL.
Which software is affected by CVE-2025-58584?
CVE-2025-58584 affects various SICK software including Baggage Analytics, Enterprise Analytics, Logistic Diagnostic Analytics, Package Analytics, and Tire Analytics.
What risks are associated with CVE-2025-58584?
The risks associated with CVE-2025-58584 include unauthorized access to user credentials and potential data breaches due to credentials being logged in various systems.
Is there a public exploit for CVE-2025-58584?
As of now, there is no publicly available exploit specifically for CVE-2025-58584, but the method of attack can be easily replicated.