CVE-2025-58585: Sensitive Information Disclosure Through Missing Authentication

Published Oct 6, 2025

Updated

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.

Affected Software

4 affected components

SICK Baggage Analytics

SICK Logistic Diagnostic Analytics

SICK Package Analytics

SICK Tire Analytics

Remediation

Information

It is strongly recommended to update the product to version 4.6.3.

Event History

Oct 6, 2025

CVE Published

via MITRE·07:01 AM

Data Sourced

via MITRE·07:01 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-58585?

CVE-2025-58585 is classified as a medium severity vulnerability due to potential unauthorized access to sensitive information.

How do I fix CVE-2025-58585?

To fix CVE-2025-58585, ensure that authentication is enforced on all endpoints that expose sensitive information.

What applications are affected by CVE-2025-58585?

CVE-2025-58585 affects multiple applications including SICK Baggage Analytics, SICK Logistic Diagnostic Analytics, SICK Package Analytics, and SICK Tire Analytics.

What types of information are at risk due to CVE-2025-58585?

CVE-2025-58585 allows for the disclosure of sensitive information which could be exploited for unauthorized data gathering.

Is authentication necessary to access data related to CVE-2025-58585?

Yes, authentication is necessary to prevent unauthorized access to sensitive endpoints affected by CVE-2025-58585.