PT-2023-22762 · Snowflake · Snowflake Jdbc Driver

Peter Mularien · Published 2023-04-14 · Updated 2023-04-27 · CVE-2023-30535

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Snowflake JDBC driver versions prior to 3.13.29

Description The Snowflake JDBC driver is affected by a command injection vulnerability via SSO URL authentication. An attacker can set up a malicious server that responds to the SSO URL with an attack payload. If the attacker tricks a user into visiting the maliciously crafted connection URL, the user's local machine will render the malicious payload, leading to remote code execution.

Recommendations For all versions prior to 3.13.29, upgrade the Snowflake JDBC driver to the latest version: 3.13.29. As a temporary workaround, consider restricting access to the SSO URL authentication mechanism until the patch is applied. Avoid using maliciously crafted connection URLs to minimize the risk of exploitation.

Exploit

Fix

Command Injection

RCE

Weakness Enumeration

CWE-77

CWE-20

Related Identifiers

CVE-2023-30535

GHSA-4G3J-C4WG-6J7X

Affected Products

Snowflake Jdbc Driver

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30535.json · Exploit
• https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30535 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30535 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4g3j-c4wg-6j7x · Vendor Advisory
• https://github.com/snowflakedb/snowflake-jdbc · Note
• https://t.me/cvenotify/48266 · Telegram Post
• https://t.me/true_secator/4331 · Telegram Post
• https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes · Note
• https://t.me/cibsecurity/62201 · Telegram Post