CVE-2026-22644: High severity SICK Incoming Goods Suite vulnerability
Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22644?
CVE-2026-22644 is considered a critical vulnerability due to the potential for session hijacking and unauthorized access.
How do I fix CVE-2026-22644?
To mitigate CVE-2026-22644, avoid passing authentication tokens in URL query parameters and instead use HTTP headers or POST requests.
What systems are affected by CVE-2026-22644?
CVE-2026-22644 affects the SICK Incoming Goods Suite and potentially other related services using similar authentication mechanisms.
What are the potential risks of CVE-2026-22644?
The risks of CVE-2026-22644 include the theft of authentication tokens, leading to session hijacking and unauthorized access to sensitive data.
Is there a workaround for CVE-2026-22644?
A possible workaround for CVE-2026-22644 is to implement strict logging policies to scrub sensitive information from logs and restrict access.