Medium · published October 6, 2025
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
| Product | Versions | Fixed in |
|---|---|---|
| sick/baggage_analytics | all versions | — |
| sick/enterprise_analytics | all versions | — |
| sick/logistic_diagnostic_analytics | all versions | — |
| sick/package_analytics | all versions | — |
| sick/tire_analytics | all versions | — |