← Back

CVE-2026-22644

nvd nist
Published: Jan 15, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.

Affected (1)

Sick
1 product
Incoming Goods Suite
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Incoming Goods Suite
All versions

Related CWEs

CWE-598
Use of GET Request Method With Sensitive Query Strings
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

References (6)

Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
US Government Resource
Source: psirt@sick.de
Not Applicable
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Product

Timeline

No history available yet.