CVE-2024-6598 - CVE House

Back to Database

Status published High CVE-2024-6598

Denial-of-service on KNIME Business Hub when certain jobs are executed

7.1 CVSS

Vulnerability Description

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction. Please contact our support for instructions in case you have run into this situation. Updating to KNIME Business Hub 1.10.2 or later solves the problem.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6598

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.knime.com/security/advisories#CVE-2024-6598

More from KNIME

View All →

Cross-site scripting vulnerabilities in KNIME Business Hub web pages

Ingress-nginx vulnerability in KNIME Business Hub

Hard-coded password for object store of KNIME Business Hub

Jobs can be saved as workflows with wrong permissions on KNIME Business Hub

Open redirect vulnerability in KNIME Business Hub

Affected Vendor

KNIME

View all reports →

Affected Software

KNIME Business Hub

Vulnerable Versions:

1.10.0

Timeline

Official Publish: July 9th, 2024

Last Modified: August 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service

T1190 Exploit Public-Facing Application

T1562 Impair Defenses

Defense Evasion

T1046 Network Service Discovery