PT-2024-37746 · Knime · Knime Business Hub

Published 2024-07-09 · Updated 2025-10-08 · CVE-2024-6598

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions 1.10.0 through 1.10.1

Description A denial-of-service attack is possible through the execution functionality of KNIME Business Hub. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction.

Recommendations For KNIME Business Hub versions 1.10.0 and 1.10.1, update to KNIME Business Hub 1.10.2 or later to resolve the issue.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2024-6598

Affected Products

Knime Business Hub

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-6598 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6598 · Vendor Advisory
• https://knime.com/security/advisories#CVE-2024-6598 · Vendor Advisory
• https://t.me/cvenotify/85533 · Telegram Post
• https://twitter.com/CVEnew/status/1810672990520041917 · Twitter Post
• https://t.me/cvedetector/350 · Telegram Post
• https://t.me/cveNotify/137851 · Telegram Post