CVE-2026-115519
CVE-2026-115519 · Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.
CVSS 2.1 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
knime business hub
- Versions
- ≥ 0, < 1.19.0: Affected (semver)
- 1.19.0: Not affected (semver)
Update to 1.19.0