CVE-2019-13349

MEDIUM

Knowage < 6.1.1 - Insufficiently Protected Credentials

Title source: rule

Description

In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.

References (1)

Scores

CVSS v3 4.9
EPSS 0.0104
EPSS Percentile 77.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (1)

knowage-suite/knowage < 6.1.1

Timeline

Published Sep 05, 2019
Tracked Since Feb 18, 2026