2.7Niedrig
CVE-2025-58589Information Disclosure Through Stacktrace
Beschreibung
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.
Schwachstellentyp (CWE):
CWE-200
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| SICK AG | Baggage Analytics | < 4.6.3 | |
| SICK AG | Logistic Diagnostic Analytics | < 4.6.3 | |
| SICK AG | Package Analytics | < 4.6.3 | |
| SICK AG | Tire Analytics | < 4.6.3 |
Referenzen und Patches
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (4)
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*