CVE-2019-13349 - In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes

MEDIUM

In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes

Published Sep 5, 2019

4.9

MEDIUM

CVSS 3.0

EPSS 1.31%

In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

Link	Providers	Tags
https://blog.contentsecurity.com.au/knowage-password-hash-disclosure		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4853		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 5, 2019

Updated Aug 4, 2024

Reserved Jul 5, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Sep 5, 2019

Updated Aug 4, 2024

Exploited since n/a