CVE-2025-11239 — Job details are visible to all team members on KNIME Business Hub

CVE-2025-11239

Job details are visible to all team members on KNIME Business Hub PUBLISHED

Description (CNA)

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data (if present).

Affected (CNA)

Vendor / product	Versions
KNIME / KNIME Business Hub	affected 0 before 1.16.0; unaffected 1.16.0

CWE

CWE-863

References

https://www.knime.com/security/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.