CVE-2023-51662 Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

🗓️ 22 Dec 2023 16:27:05Reported by GitHub_MType

Snowflake .NET driver CVE-2023-51662 CRL check bypas

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Snowflake Connector .NET driver for working with the cloud-based data processing and storage platform Snowflake on the .NET platform lies in errors related to the certificate validation process. This allows attackers to carry out “man-in-the-middle” attacks.	16 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-51662	22 Dec 202318:23	–	circl
CNNVD	snowflake-connector-net Trust Management Issues Vulnerability	22 Dec 202300:00	–	cnnvd
CVE	CVE-2023-51662	22 Dec 202316:27	–	cve
EUVD	EUVD-2023-3228	3 Oct 202520:07	–	euvd
Github Security Blog	Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)	22 Dec 202319:51	–	github
NVD	CVE-2023-51662	22 Dec 202317:15	–	nvd
OSV	CVE-2023-51662 Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)	22 Dec 202316:27	–	osv
OSV	GHSA-HWCC-4CV8-CF3H Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)	22 Dec 202319:51	–	osv
Prion	Default credentials	22 Dec 202317:15	–	prion

[
  {
    "vendor": "snowflakedb",
    "product": "snowflake-connector-net",
    "versions": [
      {
        "version": ">= 2.0.25, <= 2.1.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
docs	www.docs.snowflake.com/release-notes/clients-drivers/dotnet-2023
github	www.github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-hwcc-4cv8-cf3h

22 Dec 2023 16:27Current

7.6High risk

Vulners AI Score7.6

CVSS 3.16

EPSS0.00348

CWE-295