Executive brief
Snowflake JDBC Security Advisory
Affected products
- Maven net.snowflake:snowflake-jdbc
Junglewise Threat Intelligence
CVE-2024-43382: Snowflake JDBC Security Advisory
CVE-2024-43382 · Severity: low · CVSS 3.1 · Published 2024-10-30
Technologies: net.snowflake:snowflake-jdbc (Maven). Vendors: Maven.
Related threats
- Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
- Snowflake JDBC Driver client-side encryption key in DEBUG logs
- Snowflake JDBC uses insecure temporary credential cache file permissions
- Snowflake JDBC allows an untrusted search path on Windows
- Snowflake JDBC vulnerable to command injection via SSO URL authentication