Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SICK AG

Description

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SICK AG Incoming Goods Suite

Default version status: affected

  • all versionsaffected

References