Description
Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. When the EXTERNALBROWSER authentication method is used on Windows, an attacker with write access to a directory in the %PATH% can escalate their privileges to the user that runs the vulnerable JDBC Driver version. This vulnerability affects versions 3.2.3 through 3.21.0 on Windows. Snowflake fixed the issue in version 3.22.0.
INFO
Published Date :
2025-01-29T17:46:20.985Z
Last Modified :
2025-02-12T19:51:13.919Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2025-24789 vulnerability.
| Vendors | Products |
|---|---|
| Microsoft |
|
| Snowflake |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-24789.
