PT-2023-20052 · Knime · Knime Business Hub

Dawid Czarnecki + 1 · Published 2023-06-07 · Updated 2024-09-04 · CVE-2023-2541

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions prior to 1.4.0

Description The issue allows an unauthenticated remote attacker to access internal information about the application, such as versions, host names, or IP addresses. No personal information or application data was exposed.

Recommendations For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2023-2541

Affected Products

Knime Business Hub

References · 5

• https://knime.com/security/advisories#CVE-2023-2541 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-2541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2541 · Security Note
• https://zigrin.com/advisories/knime-business-hub-sensitive-information-disclosure · Note
• https://t.me/cvenotify/93158 · Telegram Post