SICK Incoming Goods Suite Authentication Token Exposure Vulnerability

A vulnerability exists in SICK Incoming Goods Suite that allows authentication tokens to be transmitted via the URL as query string parameters. This exposure can lead to token theft through server logs, proxy logs, and Referer headers, potentially allowing attackers to hijack user sessions and gain unauthorized access. This issue affects all versions of the SICK Incoming Goods Suite.

Impact

Exploitation of this vulnerability could result in unauthorized access to user accounts by hijacking active sessions.

Remediation

Users are strongly recommended to upgrade to the latest release of SICK Incoming Goods Suite (version 1.2.1 or higher).