be.ugent.idlab.knows:dataio (>=2.0.0, <=2.1.4), com.asemicanalytics:asemic-sql (>=1.0, <=1.13) +163 more potentially affected by CVE-2025-24790 via net.snowflake:snowflake-jdbc (>=3.6.8, <=3.21.0)

net.snowflake:snowflake-jdbc MAVEN version =3.6.8, =2.0.0, =1.0, =1.14, =1.1, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.3.0, =8.2.0-alpha.1, =0.1.0, =1.0.5-rc5 and more Source cves: CVE-2025-24790 Source advisory: OSV:GHSA-33G6-495W-V8J2...

CVE-2025-24790 vulnerabilities

Vulnerabilities for packages: trino, flyway...

CVE-2025-24790

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver...

CVE-2025-24790

creationtimestamp| type| source ---|---|--- 2025-01-29 17:53:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113912920293587523 2025-01-29 18:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvlay3sun2w 2025-01-29 19:11:16+00:00|...

CVE-2025-24790

CVE-2025-24790 affects Snowflake JDBC driver (type 4) used by Java apps. On Linux, when temporary credential caching is enabled, credentials may be cached locally in a world-readable file. Affected versions: 3.6.8 through 3.21.0. The issue has been fixed in version 3.22.0. Remediation: upgrade Sn...

CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver...

be.ugent.idlab.knows:dataio (>=2.0.0, <=2.1.4), com.asemicanalytics:asemic-sql (>=1.0, <=1.13) +163 more potentially affected by CVE-2025-24790 via net.snowflake:snowflake-jdbc (>=3.6.8, <=3.21.0)

net.snowflake:snowflake-jdbc MAVEN version =3.6.8, =2.0.0, =1.0, =1.14, =1.1, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.3.0, =8.2.0-alpha.1, =0.1.0, =1.0.5-rc5 and more Source cves: CVE-2025-24790 Source advisory: MEND:CVE-2025-24790...

CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver...