PT-2024-19403 · Unknown+2 · Clickhouse+1

Abraithwaite

+1

·

Published

2024-01-30

·

Updated

2025-12-23

·

CVE-2024-22412

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ClickHouse versions prior to 24.0.2.54535 ClickHouse version 23.1
Description A bug exists in ClickHouse that allows query caching to bypass role-based access controls and policies. This means that attackers with control of a role could guess queries and see data they shouldn't have access to. The query cache only respects separate users, which is not documented and not expected behavior. People relying on ClickHouse roles can have their access control lists bypassed if they are using query caching. There are approximately 53,543 results found in the ZoomEye cyberspace search engine.
Recommendations For ClickHouse versions prior to 24.0.2.54535, update to version 24.0.2.54535 or later to resolve the issue. For ClickHouse version 23.1, update to version 24.1 or later to resolve the issue. As a temporary workaround, consider disabling the query cache when dynamically switching between various roles to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2024-22412
ECHO-322B-5717-8504
GHSA-45H5-F7G3-GR8R

Affected Products

Clickhouse
Debian