5.5

CVE-2025-24790: snowflake snowflake_jdbc Incorrect Default Permissions

CVSS: 5.5v3.1MediumAnalyzed
AliasesCGA-274x-x5x7-qmj8CGA-2926-8689-h6jgCGA-29f3-cq39-3j82
Published 29-01-2025Last modified 12-02-2025
Open JSON

Vulnerability summary

CVE-2025-24790 is a medium (CVSS 5.5) Incorrect Default Permissions vulnerability in snowflake snowflake_jdbc. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.3% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 3
CGA-8392-XR9V-32QCCGA-MFJF-9GQG-2JJRCGA-P3GX-2P4Q-W594

Timeline

  1. 29-01-2025
    PublishedVulnerability first disclosed.
  2. 12-02-2025
    Last modifiedVulnerability information updated.

Description

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching is enabled, the Snowflake JDBC Driver will cache temporary credentials locally in a world-readable file. This vulnerability affects versions 3.6.8 through 3.21.0. Snowflake fixed the issue in version 3.22.0.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

0.00 pp

From 0.19% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard60 products
  • flyway< 11.2.0-r1
  • trino< 472-r0
  • trino-config< 472-r0
  • trino-oci-entrypoint< 472-r0
  • trino-plugin-ai-functions< 472-r0
Wolfi60 products
  • flyway< 11.2.0-r1
  • trino< 472-r0
  • trino-config< 472-r0
  • trino-oci-entrypoint< 472-r0
  • trino-plugin-ai-functions< 472-r0
Net.snowflake1 product
  • snowflake-jdbc≥ 3.6.8, < 3.22.0
Snowflake1 product
Snowflakedb1 product

5 vendors · 123 products

References

5 links