CVE-2019-13348 Information disclosure in n/a

What is CVE-2019-13348?

CVE-2019-13348 is a high-severity vulnerability in n/a, published on 28 Aug 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.

Weakness: CWE-522

Which versions are affected by CVE-2019-13348?

It affects 1 product.

Products include Eng Knowage.

How do I fix CVE-2019-13348?

No fix has been published for CVE-2019-13348 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-13348 being exploited?

There is no known exploitation of CVE-2019-13348 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2023-38702 Knowage Server vulnerable to path traversal via upload functionality Critical 10.0
• CVE-2019-13188 Auth bypass in n/a Critical 9.8
• CVE-2025-59954 Knowage Contains a Remote Code Execution Vulnerability Critical 9.3
• CVE-2021-30055 SQL injection in n/a High 8.8
• CVE-2023-37472 Query injection in Knowage server High 7.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-h3q3-rm4g-pqjh.