CVE-2021-44725: Path Traversal
Published Dec 8, 2021
·Updated
KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.
Affected Software
1 affected component
KNIME KNIME Server<4.13.4
Event History
Dec 8, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-44725.
2
What is the severity of CVE-2021-44725?
The severity of CVE-2021-44725 is high, with a severity value of 7.5.
3
Which versions of KNIME Server are affected by CVE-2021-44725?
KNIME Server versions up to and excluding 4.13.4 are affected by CVE-2021-44725.
4
What is the vulnerability described in CVE-2021-44725?
CVE-2021-44725 is a vulnerability in KNIME Server that allows directory traversal in a request for a client profile.
5
How can I fix CVE-2021-44725?
To fix CVE-2021-44725, update KNIME Server to version 4.13.4 or later.