CVE-2021-45097

MEDIUM 5.5CVE-2021-45097 · Published 16/12/2021 · updated 17/06/2026

In short

CVE-2021-45097 is a MEDIUM (CVSS 5.5) vulnerability affecting knime server (knime).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 13.0% of all vulnerabilities.
Fix: update to 4.13.4 or later.

Package	Affected versions	Patched versions
knime server knime	`≥ 4.13, < 4.13.4≤ 4.12.5`	`4.13.4`

Description

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.

References

dawid-czarnecki/public-vulnerabilities · Broken Link
zigrin.com/advisories/knime-server-weak-file-permissions

More vulnerabilities in knime server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free