« Volver al listado

CVE-2025-2787

Estado: AnalizadaAlta (8.7)—

KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower.

Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub:

Detalles técnicos trazas, registros y código del informe original
  *  1.13.3 or above

  *  1.12.4 or above

  *  1.11.4 or above

  *  1.10.4 or above

  *

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vulnerabilidad en componente ingress-nginx (CWE-94: improper control of generation of code) accesible desde la red pero requiere autenticación (PR:L). Acceso remoto a servicios internos del cluster Kubernetes con capacidad de ejecución de código y escalada de privilegios administrativos.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramPrivileged Account ManagementExecution PreventionDisable or Remove Feature or ProgramApplication Isolation and SandboxingExploit Protection

Tecnologías afectadas (1)

Knime — Business HUB

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-2787",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-2787",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-27T13:23:10.416717Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "security@knime.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "USER",
          "baseScore": 8.7,
          "Automatable": "NO",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "CONCENTRATED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "AMBER",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "LOW",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "LOW",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "MODERATE",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "security@knime.com",
      "affectedData": [
        {
          "vendor": "KNIME",
          "product": "KNIME Business Hub",
          "versions": [
            {
              "status": "affected",
              "version": "1.13.0",
              "versionType": "semver",
              "lessThanOrEqual": "1.13.2"
            },
            {
              "status": "affected",
              "version": "1.12.0",
              "versionType": "semver",
              "lessThanOrEqual": "1.12.3"
            },
            {
              "status": "affected",
              "version": "1.11.0",
              "versionType": "semver",
              "lessThanOrEqual": "1.11.3"
            },
            {
              "status": "affected",
              "version": "0",
              "versionType": "semver",
              "lessThanOrEqual": "1.10.3"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-03-26T21:15:23.167",
  "references": [
    {
      "url": "https://www.knime.com/security-advisory-cve-2025-2787",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "security@knime.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower.\n\n\n\nBesides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: \n\n\n\n  *  1.13.3 or above \n\n\n\n\n\n\n  *  1.12.4 or above \n\n\n\n\n\n\n  *  1.11.4 or above \n\n\n\n\n\n\n  *  1.10.4 or above\n\n\n\n\n\n\n\n\n  *"
    },
    {
      "lang": "es",
      "value": "KNIME Business Hub se ve afectado por la vulnerabilidad Ingress-nginx CVE-2025-1974 (también conocida como IngressNightmare), que afecta al componente ingress-nginx. En el peor de los casos, es posible que el clúster de Kubernetes se apodere completamente de él. Dado que el componente afectado solo es accesible desde dentro del clúster, es decir, requiere un usuario autenticado, la gravedad en el contexto de KNIME Business Hub es ligeramente menor. Además de aplicar los workarounds conocidos, recomendamos encarecidamente actualizar a una de las siguientes versiones de KNIME Business Hub: * 1.13.3 o superior * 1.12.4 o superior * 1.11.4 o superior * 1.10.4 o superior *"
    }
  ],
  "lastModified": "2026-06-17T09:07:37.540",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D2BD1DD-BE57-4CB0-A8DD-63E2885D95DF",
              "versionEndExcluding": "1.10.4",
              "versionStartIncluding": "1.10.0"
            },
            {
              "criteria": "cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86A92FC4-D6CF-4736-9932-FFD4CA7A07BA",
              "versionEndExcluding": "1.11.4",
              "versionStartIncluding": "1.11.0"
            },
            {
              "criteria": "cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "655A33C9-C973-43D5-A4F7-CAC44756672A",
              "versionEndExcluding": "1.12.4",
              "versionStartIncluding": "1.12.0"
            },
            {
              "criteria": "cpe:2.3:a:knime:business_hub:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BA35652-95D4-4F37-9A60-7F1EB87885CE",
              "versionEndExcluding": "1.13.3",
              "versionStartIncluding": "1.13.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@knime.com"
}