Back to Database
Status published
Medium
CVE-2023-2541
Sensitive information disclosure in KNIME Hub Web Application
Vulnerability Description
The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-2541
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Zigrin Security
References
More from KNIME
View All →CVE-2025-3019
Cross-site scripting vulnerabilities in KNIME Business Hub web pages
Medium
5.3
CVE-2025-2787
Ingress-nginx vulnerability in KNIME Business Hub
High
8.7
CVE-2025-2402
Hard-coded password for object store of KNIME Business Hub
High
8.8
CVE-2025-14262
Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
Medium
5.3
CVE-2025-11240
Open redirect vulnerability in KNIME Business Hub
Medium
5.3
Affected Vendor
KNIME
View all reports →Affected Software
KNIME Business Hub
Vulnerable Versions:
1.0.0
Timeline
Official Publish:
June 7th, 2023
Last Modified:
September 4th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N