Executive brief
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Affected products
- Maven net.snowflake:snowflake-jdbc
Junglewise Threat Intelligence
CVE-2025-27496: Snowflake JDBC Driver client-side encryption key in DEBUG logs
CVE-2025-27496 · Severity: low · CVSS 3.1 · Published 2025-03-13
Technologies: net.snowflake:snowflake-jdbc (Maven). Vendors: Maven.
Related threats
- Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner
- Snowflake JDBC uses insecure temporary credential cache file permissions
- Snowflake JDBC allows an untrusted search path on Windows
- Snowflake JDBC Security Advisory
- Snowflake JDBC vulnerable to command injection via SSO URL authentication