medium5.3
CVE-2025-49188
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
Impact
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Field Analytics | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf