CVE-2025-58591: baggage analytics 0 to before 4.6.3; +3 more affected products

Affected technology

baggage analytics · 0 to before 4.6.3
sick

logistic diagnostic analytics · 0 to before 4.6.3
sick

package analytics · 0 to before 4.6.3
sick

tire analytics · 0 to before 4.6.3
sick

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information. Vendor/CNA’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality impact as high; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none.