Skip to content
OpenAdvisories
Unscored CVE-2020-2077 EUVD-2020-22103GHSA-24pm-ccpf-9wgw

SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauth…

Published Jul 29, 2020 · Updated Aug 4, 2024 · Assigned by SICK AG

Description

SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly.

Affected products

VendorProductAffectedFixed
— SICK Package Analytics <=V04.0.0 —

Advisories 1

References