CVE-2021-45097

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file…

Low · published December 16, 2021

CVSS v3.1
2.9
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AC:H/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.3th percentile
Published
2021-12-16T00:00Z
EPSS history
Timeline
  • 16 DEC 00:00Z
    KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file…
    cvelistv5