Incorrect Security Setting

🗓️ 13 Nov 2024 04:38:51Reported by Veracode Vulnerability DatabaseType

Vulnerability in snowflake-jdbc allows unauthorized access to sensitive information due to incorrect settings.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in the Snowflake JDBC driver	28 Mar 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	2 Dec 202408:30	–	ibm
IBM Security Bulletins	Security Bulletin: Snowflake JDBC driver affects watsonx.data	5 Mar 202513:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	10 Mar 202607:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a snowflake-jdbc-3.14.0.jar vulnerability (CVE-2024-43382)	19 Jun 202505:35	–	ibm
Chainguard	CVE-2024-43382 vulnerabilities	22 Mar 202516:12	–	cgr
Circl	CVE-2024-43382	30 Oct 202422:33	–	circl
CNNVD	Snowflake JDBC 安全漏洞	30 Oct 202400:00	–	cnnvd
CVE	CVE-2024-43382	30 Oct 202400:00	–	cve

Vulners

Node

Source	Link
github	www.github.com/snowflakedb/snowflake-jdbc/pull/1946
github	www.github.com/snowflakedb/snowflake-jdbc/commit/45afd71ac16ea55aeba91b8bacb4859344ae1b34
github	www.github.com/advisories/GHSA-f686-hw9c-xw9c

13 Nov 2024 10:14Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.9

EPSS0.00205

SSVC