CVE-2021-45097

CVE-2021-45097 describes a vulnerability in KNIME Server versions prior to 4.12.6 and 4.13.4 (when installed in unattended mode), where the administrator's password is stored in a file with insufficient access controls, allowing any local user to read it. This is a medium severity vulnerability (CVSS 5.5) with a low attack complexity, requiring local access to the system, and primarily impacting confidentiality by exposing sensitive credentials. While the potential impact is high for confidentiality, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.