CVE-2023-30535: Snowflake JDBC vulnerable to command injection via SSO URL authentication
Snowflake Computing Snowflake JDBC could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a command injection flaw in the SSO URL authentication. By persuading a victim to connect to a specially crafted server, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Other sources
Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. All users should immediately upgrade the Snowflake JDBC driver to the latest version: 3.13.29.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30535?
CVE-2023-30535 is considered a critical vulnerability due to its potential to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2023-30535?
To fix CVE-2023-30535, update the Snowflake JDBC driver to version 3.13.29 or later.
Who is affected by CVE-2023-30535?
CVE-2023-30535 affects users of the Snowflake JDBC driver and certain IBM Cloud Pak for Data products.
What type of vulnerability is CVE-2023-30535?
CVE-2023-30535 is a command injection vulnerability that can be exploited through SSO URL authentication.
Can CVE-2023-30535 be exploited remotely?
Yes, CVE-2023-30535 can be exploited remotely by authenticating users who connect to a malicious server.