CVE-2026-22644 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer h…
Medium CVSS: 5.3

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.
Vendor
Sick
Product
Incoming Goods Suite
CWE
CWE-598
Yayın Tarihi
2026-01-15 14:16:28
Güncelleme
2026-01-29 17:23:06
Source Identifier
psirt@sick.de
KEV Date Added
-

Kategoriler

CWE-598 Incoming Goods Suite MEDIUM Sick 2026

Referanslar

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf