DNA View

CVE-2024-43382

Medium
Low Medium High Critical
5.9
CVSS Score
Published: Oct 30, 2024
Last Modified: Aug 20, 2025

Vulnerability Description

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Attack Vector
N
Attack Complexity
H
Privileges Required
H
User Interaction
N
Scope
U
Confidentiality
H
Integrity
H
Availability
N

Known Affected Software

113 configuration(s) from 1 vendor(s)

snowflake_jdbc
Version:
3.10.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.10.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.22
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.22:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.4.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.4.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.4
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.4:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.27
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.27:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.3.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.3.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.8
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.8:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.30
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.30:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.4
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.4:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.13
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.13:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.9
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.9:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.17
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.17:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.21
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.21:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.7
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.7:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.10.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.10.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.9
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.9:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.12
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.12:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.2.7
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.2.7:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.21
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.21:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.10.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.10.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.11
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.11:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.8
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.8:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.8
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.8:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.13
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.13:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.28
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.28:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.7.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.7.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.14
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.14:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.6
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.6:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.10.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.10.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.4.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.4.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.29
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.29:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.5
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.5:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.7
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.7:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.28
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.28:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.3.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.3.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.7
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.7:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.3.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.3.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.26
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.26:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.24
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.24:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.7.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.7.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.20
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.20:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.11
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.11:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.25
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.25:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.27
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.27:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.5.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.5.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.14
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.14:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.5.4
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.5.4:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.16
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.16:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.6
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.6:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.17
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.17:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.25
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.25:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.10
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.10:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.14
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.14:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.23
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.23:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.11
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.11:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.16
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.16:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.5.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.5.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.16
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.16:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.9.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.9.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.15
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.15:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.5.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.5.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.5.5
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.5.5:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.5
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.5:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.26
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.26:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.15
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.15:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.20
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.20:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.23
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.23:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.7
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.7:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.15
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.15:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.4
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.4:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.9.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.9.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.8
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.8:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.8.5
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.8.5:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.12
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.12:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.19
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.19:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.9
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.9:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.19
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.19:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.5
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.5:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.18
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.18:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.4.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.4.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.4.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.4.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.10
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.10:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.13
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.13:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.12
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.12:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.6
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.6:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.10
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.10:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.17
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.17:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.18
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.18:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.13.4
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.13.4:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.12.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.12.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.7.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.7.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.6
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.6:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.24
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.24:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.9.2
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.9.2:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.11.0
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.11.0:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.6.3
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.6.3:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.2.6
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.2.6:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.11.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.11.1:*:*:*:*:*:*:*
snowflake_jdbc
Version:
3.3.1
CPE:
cpe:2.3:a:snowflake:snowflake_jdbc:3.3.1:*:*:*:*:*:*:*
This vulnerability affects 113 software configuration(s). Ensure you patch all affected systems.

Available Security Patches

1 patch available from vendors

View All Patches
Oracle

CPUJAN2025

Oracle Critical Patch Update Advisory - January 2025

Severity
Critical
Released
Jan 21, 2025
Restart Required
Security Update

Severity Details

5.9
out of 10.0
Medium

Weakness Type (CWE)

CWE-326

Inadequate Encryption Strength

Description
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Typical Severity
Medium
Abstraction Level
Class

Key Information

Published Date
October 30, 2024