CVE-2025-24791mediumCWE-281

CVE-2025-24791: falha de média gravidade em snowflakedb snowflake-connector-nodejs

snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions

Publicada em

Seguir esta CVE+ Monitorar snowflake-connector-nodejs+ Monitorar snowflake-sdk

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.1%
snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File permissions checks of the temporary credential cache could be bypassed by an attacker with write access to the local cache directory. This vulnerability affects versions 1.12.0 through 2.0.1 on Linux. Snowflake fixed the issue in version 2.0.2.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
snowflakedb · snowflake-connector-nodejs
CVEs relacionadas — snowflakedb snowflake-connector-nodejs

No mesmo produto, das mais perigosas para as menos.

CVE-2023-34232HIGHSnowflake NodeJS Driver vulnerable to Command InjectionEPSS 1.9%CVE-2025-46328LOWNodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration fileEPSS 0.2%