CVE-2019-13348

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-08-28

Last modified

2024-08-04

Weaknesses

CWE-522

Affected products

• Knowage (Eng)

References

• https://blog.contentsecurity.com.au/knowage-password-disclosure