CVE-2026-115519 — Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other securi…
Published: 2026-10-22 · CVSS: 2.1 · CVSS 4.0
Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not possible.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7