| Package | Affected versions | Patched versions |
|---|---|---|
| knime server | ≥ 4.13, < 4.13.4≤ 4.12.5 | 4.13.4 |
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free