CVE-2023-2541

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Web Frontend of KNIME Business Hub before 1.4.0 allows an unauthenticated remote attacker to access internals about the application such as versions, host names, or IP addresses. No personal information or application data was exposed.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-497

Affected software

Vendor	Product	Versions
KNIME	KNIME Business Hub	>= 1.0.0, < 1.4.0

References

https://www.knime.com/security/advisories#CVE-2023-2541Vendor Advisory
https://zigrin.com/advisories/knime-business-hub-sensitive-information-disclosure/Third Party Advisory
https://www.knime.com/security/advisories#CVE-2023-2541Vendor Advisory
https://zigrin.com/advisories/knime-business-hub-sensitive-information-disclosure/Third Party Advisory

Timeline

Published: Jun 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-254114.3Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2023-254137.5Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials.CVE-2023-254145.3Aten PE8108 2.4.232 is vulnerable to denial of service (DOS).CVE-2023-254155.3Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration.CVE-2023-254287.8A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution.CVE-2023-254314.8An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/assessments/course/cou CVE-2023-254327.2An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the back CVE-2023-254335.5libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in CVE-2023-254348.8libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.CVE-2023-254355.5libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.CVE-2023-254378.8An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive inf CVE-2023-254387.8An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalated privileges via mo