CVE-2024-6598

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-6598

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

A

denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction. Please contact our support for instructions in case you have run into this situation. Updating to KNIME Business Hub 1.10.2 or later solves the problem.

References
Link Resource
https://www.knime.com/security/advisories#CVE-2024-6598 Vendor Advisory
https://www.knime.com/security/advisories#CVE-2024-6598 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*
History

08 Oct 2025, 17:11

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*
References () https://www.knime.com/security/advisories#CVE-2024-6598 - () https://www.knime.com/security/advisories#CVE-2024-6598 - Vendor Advisory
First Time Knime
Knime business Hub

21 Nov 2024, 09:49

Type Values Removed Values Added
Summary
  • (es) Es posible un ataque de denegación de servicio mediante la funcionalidad de ejecución de KNIME Business Hub 1.10.0 y 1.10.1. Permite que un atacante autenticado con privilegios de ejecución de trabajos ejecute un trabajo que hace que los mensajes internos se acumulen hasta que no haya más recursos disponibles para procesar mensajes nuevos. Esto provoca una interrupción de la mayor parte de las funciones de KNIME Business Hub. La recuperación de la situación sólo es posible mediante la interacción manual del administrador. Comuníquese con nuestro soporte para obtener instrucciones en caso de que se haya encontrado con esta situación. La actualización a KNIME Business Hub 1.10.2 o posterior resuelve el problema.
References () https://www.knime.com/security/advisories#CVE-2024-6598 - () https://www.knime.com/security/advisories#CVE-2024-6598 -

09 Jul 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-09 14:15

Updated : 2025-10-08 17:11

NVD link : CVE-2024-6598

Mitre link : CVE-2024-6598

CVE.ORG link : CVE-2024-6598

JSON object : View

Products Affected

knime

CWE
CWE-770

Allocation of Resources Without Limits or Throttling