PT-2025-5569 · Snowflake · Snowflake-Connector-Net

Published 2025-01-29 · Updated 2025-01-29 · CVE-2025-24788

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions snowflake-connector-net versions 2.0.12 through 4.2.0

Description The issue arises when files downloaded from stages are temporarily placed in a world-readable local directory, making them accessible to unauthorized users on the same machine. This occurs because the files in the temporary directory have world-readable permissions on Linux and macOS. The estimated number of potentially affected devices is not specified.

Recommendations For versions 2.0.12 through 4.2.0, upgrade to version 4.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the temporary directory used by the Snowflake Connector for .NET to minimize the risk of exploitation.

Exploit

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-24788

GHSA-2MQW-RQ5M-8HC8

Affected Products

Snowflake-Connector-Net

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24788.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-24788 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24788 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2mqw-rq5m-8hc8 · Vendor Advisory
• https://github.com/snowflakedb/snowflake-connector-net · Note
• https://github.com/snowflakedb/snowflake-connector-net/commit/89d91e8316ca213c5d184bcf469ed93977a5edf9 · Note
• https://github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-2mqw-rq5m-8hc8 · Note
• https://t.me/cvedetector/16703 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1884720414686949709 · Twitter Post
• https://twitter.com/CVEnew/status/1884703063031882222 · Twitter Post