C
ertain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft through server logs, proxy logs and Referer headers, which could allow an attacker to hijack the user's session and gain unauthorized access.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
History
29 Jan 2026, 17:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sick incoming Goods Suite
Sick |
|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json - Vendor Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf - Vendor Advisory | |
| References | () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product | |
| CPE | cpe:2.3:a:sick:incoming_goods_suite:*:*:*:*:*:*:*:* |
15 Jan 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 14:16
Updated : 2026-01-29 17:23
NVD link : CVE-2026-22644
Mitre link : CVE-2026-22644
CVE.ORG link : CVE-2026-22644
JSON object : View
Products Affected
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings