227 matches found
Default credentials
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes...
Code injection
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-13188
In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application...
Design/Logic Flaw
In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application...
CVE-2019-13188
CVE-2019-13188 affects Knowage up to version 6.1.1, where an unauthenticated user can bypass access controls and gain access to the entire application. The connected sources consistently describe an access-control bypass vulnerability enabling full visibility/interaction with the Knowage applicat...
CVE-2019-13188
In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application...
CVE-2019-14278
Technical details about CVE-2019-14278 are not publicly available in the provided connected documents; no additional specifics on affected components, exploit methods, or remediation are included here. Monitor for updates.
CVE-2019-14278
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page...
CVE-2019-13349
CVE-2019-13349 affects Knowage up to version 6.1.1, where an authenticated user accessing the users page can obtain all user password hashes. The connected Red Hat/CNVD/CVE lists corroborate the same description. The impact is exposure of password hashes to an authenticated user; exploit details,...
CVE-2019-13349
In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
Design/Logic Flaw
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page...
CVE-2019-13190
Knowage up to version 6.1.1 contains a CAPTCHA bypass vulnerability where the signup page does not invalidate a valid CAPTCHA token, enabling bypass of CAPTCHA on registration. This affects the sign-up functionality and stems from the CAPTCHA token validation flaw described across multiple source...
Knowage Trust Management Issues Vulnerabilities
Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A trust management issue vulnerability exists in Knowage 6.1.1 and prior versions. An attacker can exploit this vulnerability to obtain arbitrary resource credentials...
Knowage Cross-Site Scripting Vulnerability
Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A cross-site scripting vulnerability exists in Knowage 6.1.1 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WE...