PT-2023-22762 · Snowflake · Snowflake Jdbc Driver

Peter Mularien · Publicado 2023-04-14 · Atualizado 2023-04-27 · CVE-2023-30535

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Snowflake JDBC driver versions prior to 3.13.29

Description The Snowflake JDBC driver is affected by a command injection vulnerability via SSO URL authentication. An attacker can set up a malicious server that responds to the SSO URL with an attack payload. If the attacker tricks a user into visiting the maliciously crafted connection URL, the user's local machine will render the malicious payload, leading to remote code execution.

Recommendations For all versions prior to 3.13.29, upgrade the Snowflake JDBC driver to the latest version: 3.13.29. As a temporary workaround, consider restricting access to the SSO URL authentication mechanism until the patch is applied. Avoid using maliciously crafted connection URLs to minimize the risk of exploitation.

Exploit

Correção

Command Injection

RCE

Enumeração de Fraquezas

CWE-77

CWE-20

Identificadores relacionados

CVE-2023-30535

GHSA-4G3J-C4WG-6J7X

Produtos afetados

Snowflake Jdbc Driver

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30535.json · Exploit
• https://github.com/snowflakedb/snowflake-jdbc · Nota
• https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30535 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-30535 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-4g3j-c4wg-6j7x · Aviso do Fabricante
• https://t.me/cvenotify/48266 · Publicação no Telegram
• https://t.me/true_secator/4331 · Publicação no Telegram
• https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes · Nota
• https://t.me/cibsecurity/62201 · Publicação no Telegram