{“lastseen”:””,”description”:”In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally.”,”published”:”2025-10-06T07:01:04.945Z”,”modified”:”2025-10-06T07:01:04.945Z”,”type”:”cve”,”title”:”Plain Text Transmission of Username and Password in the URL”,”source”:”SICK AG”,”references”:”https:\/\/sick.com\/psirt\\nhttps:\/\/www.sick.com\/media\/docs\/9\/19\/719\/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf\\nhttps:\/\/www.cisa.gov\/resources-tools\/resources\/ics-recommended-practices\\nhttps:\/\/www.first.org\/cvss\/calculator\/3.1\\nhttps:\/\/www.sick.com\/.well-known\/csaf\/white\/2025\/sca-2025-0010.json\\nhttps:\/\/www.sick.com\/.well-known\/csaf\/white\/2025\/sca-2025-0010.pdf”,”id”:”CVE-2025-58584″,”bulletinFamily”:””,”cwe”:[“CWE-598″],”cvelist”:null,”sourceData”:”SICK AG Baggage Analytics all versions\\nSICK AG Tire Analytics all versions\\nSICK AG Package Analytics all versions\\nSICK AG Logistic Diagnostic Analytics all versions\\nSICK AG Enterprise Analytics all versions”,”sourceHref”:””,”cvss”:{“score”:5.3,”severity”:”MEDIUM”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:L\/I:N\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Baggage Analytics”,”version”:”all versions”,”vendor”:”SICK AG”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,22,12,21,13,7,11,5],"class_list":["post-20316","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-53","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n