CVE-2023-2541: Sensitive information disclosure in KNIME Hub Web Application
Published Jun 7, 2023
·Updated
The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed.
Affected Software
1 affected component
KNIME Business Hub<1.4.0
Remediation
Information
An update to KNIME Business Hub 1.4.0 is advised.
Event History
Jun 7, 2023
CVE Published
08:08 AM
Data Sourced
08:08 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-2541.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Sensitive information disclosure in KNIME Hub Web Application'.
3
What is the severity of CVE-2023-2541?
The severity of CVE-2023-2541 is medium, with a severity value of 5.3.
4
Which software version is affected by CVE-2023-2541?
The KNIME Business Hub version up to and excluding 1.4.0 is affected by CVE-2023-2541.
5
How can I fix the vulnerability?
To fix the vulnerability, update KNIME Business Hub to version 1.4.0 or later.