Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Denial-of-service on KNIME Business Hub when certain jobs are executed
Vulnerability Description
A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction. Please contact our support for instructions in case you have run into this situation. Updating to KNIME Business Hub 1.10.2 or later solves the problem.
CVSS Information
N/A
Vulnerability Type
不加限制或调节的资源分配
Vulnerability Title
KNIME Business Hub 安全漏洞
Vulnerability Description
KNIME Business Hub是KNIME公司的用于数据科学自动化、部署模型、团队协作和管理工作流的企业软件。 KNIME Business Hub 1.10.0版本和1.10.1版本存在安全漏洞，该漏洞源于容易受到拒绝服务攻击，从而产生功能中断。
CVSS Information
N/A
Vulnerability Type
N/A