Snowflake JDBC uses insecure temporary credential cache file permissions

🗓️ 29 Jan 2025 18:42:07Reported by GitHub Advisory DatabaseType

Snowflake JDBC Driver had a vulnerability in temporary credential caching on Linux systems.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in the Snowflake JDBC driver	28 Mar 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	10 Mar 202607:07	–	ibm
IBM Security Bulletins	Security Bulletin: On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file, affects watsonx.data	12 May 202512:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities.	28 Aug 202514:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202503:59	–	ibm
Chainguard	CVE-2025-24790 vulnerabilities	29 Jan 202518:15	–	cgr
Circl	CVE-2025-24790	29 Jan 202517:53	–	circl
CNNVD	Snowflake JDBC 安全漏洞	29 Jan 202500:00	–	cnnvd
CVE	CVE-2025-24790	29 Jan 202517:49	–	cve
Cvelist	CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions	29 Jan 202517:49	–	cvelist

Vulners

Node

Source	Link
github	www.github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-33g6-495w-v8j2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-24790
github	www.github.com/snowflakedb/snowflake-jdbc/commit/9e1a5acf12406b16c4780ca013f4c4db48b74b59
github	www.github.com/advisories/GHSA-33g6-495w-v8j2

29 Jan 2025 18:42Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.4 - 5.5

EPSS0.00088

SSVC