CVE-2025-58586 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing…
Medium CVSS: 5.3

CVE-2025-58586

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
Vendor
Sick
Product
Baggage Analytics
CWE
CWE-204
Yayın Tarihi
2025-10-06 07:15:35
Güncelleme
2026-01-27 19:46:54
Source Identifier
psirt@sick.de
KEV Date Added
-

Kategoriler

CWE-204 Baggage Analytics MEDIUM Sick 2025

Referanslar

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf