CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:NCVE-2024-43382
Medium (5.9) in snowflake snowflake jdbc. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in net.snowflake:snowflake-jdbc 3.20.0.
Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWE
- CWE-326
- Published
- Modified
- Record from
- the NVD, synced
Affected
- snowflake:snowflake_jdbc
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-f686-hw9c-xw9c | Maven | net.snowflake:snowflake-jdbc | >=3.2.6 <3.20.0 | 3.20.0 |