2.7Düşük
CVE-2025-58589Information Disclosure Through Stacktrace
Açıklama
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| SICK AG | Baggage Analytics | < 4.6.3 | |
| SICK AG | Logistic Diagnostic Analytics | < 4.6.3 | |
| SICK AG | Package Analytics | < 4.6.3 | |
| SICK AG | Tire Analytics | < 4.6.3 |
Kaynaklar ve yamalar
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (4)
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*