Sensitive information disclosure in KNIME Hub Web Application
CVE-2023-2541

5.3MEDIUM

Key Information:

Vendor

Knime

Status
Knime Business Hub
Vendor
CVE Published:
7 June 2023

What is CVE-2023-2541?

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed.

Affected Version(s)

KNIME Business Hub 1.0.0 < 1.4.0

References

https://www.knime.com/security/advisories#CVE-2023-2541
https://zigrin.com/advisories/knime-business-hub-sensitiv...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zigrin Security
.