CVE-2025-27496: snowflake snowflake_jdbc
CVSS: 3.3v3.1LowAnalyzed
AliasesCGA-24cr-2623-jmjwCGA-26cp-j2hf-5jf3CGA-2f9q-9hc7-3563CGA-2q76-53qr-ppfvCGA-2qjv-2v5x-jxcjCGA-3396-hcwv-mf6pCGA-38vw-p8q5-mgvqCGA-3992-qcwv-7896CGA-3rg2-3pfp-4m5xCGA-3x25-p5xc-vx2hCGA-4243-rj7f-467fCGA-43fv-f6h6-xpq3CGA-43qj-72rh-j2f7CGA-44h7-7h3w-h2gpCGA-47wh-gmj9-ph2xCGA-4h6p-5p4w-gcqrCGA-4qp4-xrf4-gwc7CGA-4xxh-x589-943vCGA-57wx-6r25-w964CGA-5rjj-v72q-g9fjCGA-6376-9r86-qpcfCGA-6698-4rr9-48p6CGA-68jw-jmmw-f5q7CGA-69r2-m3v6-xfmmCGA-6cfq-xrpc-qcqjCGA-6p5j-qr2w-v6vvCGA-6pgq-436p-w5jmCGA-6phj-6phq-f829CGA-6xmg-6jrh-4c9gCGA-6xw6-xmqx-5qmhCGA-756g-4jhw-75j8CGA-795w-f4xv-rc35CGA-79pw-54cr-3vrgCGA-7f99-3v6v-7855CGA-7rmw-jgm6-rr5wCGA-838w-j962-fgc7CGA-87c6-mgmg-5c6pCGA-896q-q6m5-q4q2CGA-8c6p-ghp2-689rCGA-8p3w-h8w4-538gCGA-8wfj-22jr-2p22CGA-8x5c-2qjr-r28pCGA-97ff-c5jc-h2v2CGA-9m28-xc6h-r8fvCGA-9rjf-r34j-cw54CGA-9w79-227f-m57wCGA-9x5j-r69j-v49vCGA-9xq8-wrwm-j27rCGA-c4h8-7pjh-xm5jCGA-c975-hw6q-v944CGA-cc29-fmq4-m3wmCGA-cgqc-8fq5-fg7cCGA-cjq4-6g53-qwc4CGA-cmmj-536v-gxhjCGA-cwrx-mqph-pwfvCGA-f454-pgr4-rmgjCGA-f5q3-7x4f-422vCGA-fmj2-g82h-w2r4CGA-fqcj-8474-4hxhCGA-fw9w-85f3-wqf7CGA-g5mp-77x2-vrhrCGA-g669-cfcv-xq24CGA-g68p-pjqj-rxv9CGA-g8h5-v4xh-xpq6CGA-g8qv-w39w-j3f7CGA-gmm8-gjqm-gp84CGA-gmwx-x35g-2p69CGA-gpw6-fcm4-633xCGA-gq5h-2vhr-xrg2CGA-gwfw-hf7j-pv58CGA-h2cr-59qv-4qrwCGA-h2qp-58mh-p6v6CGA-h9c6-cvw9-wj3mCGA-hfcv-rp78-8hr2CGA-hgf2-89fp-jjhfCGA-hpc9-rghv-v9mxCGA-j2gc-jjc8-m6xrCGA-jc7w-33qh-cfmxCGA-jmxw-hr9c-58xxCGA-jp8h-8p9f-532xCGA-m22m-wg4r-qcgcCGA-m8h7-mgm4-qxh8CGA-mc34-cxqx-v88hCGA-p5c8-9xxm-jj4jCGA-p5jv-hv7w-h88mCGA-p63j-56vh-7m99CGA-p7hm-w86x-2grvCGA-p83f-5vwp-wj5xCGA-pfj2-4xc8-3vwqCGA-pfw4-ffx4-2p2qCGA-pjf8-7x2r-mfxvCGA-q585-xr4q-h8ggCGA-qgcx-c3cx-6rqmCGA-qmxx-6fpv-qgh5CGA-qrq3-grg9-3f99CGA-qvm7-9cc2-q24gCGA-r9xf-hpqf-gvvfCGA-rgp4-9586-2533CGA-rmvg-p4p8-mv52CGA-rv2v-42rj-6v46CGA-v49q-f3xg-38m3CGA-v5wg-rp8h-52wrCGA-v658-8m8w-m2p8CGA-v6j5-hqfh-6rrmCGA-vf9j-mxvv-8j4qCGA-vg5q-7h4h-r33vCGA-vvxx-qh6h-568hCGA-vxm4-c5m4-qcwqCGA-w69p-g97m-ch4mCGA-wvr9-74hc-p3p8CGA-wxfc-q7vh-h98cCGA-x2jh-c8r7-4vcpCGA-x3g6-jchf-x86pCGA-x849-4g6h-wc48CGA-x8jf-2qpf-4wm6CGA-xh73-6c28-xphwCGA-xm97-g5gg-vfg4CGA-xr5j-wcq3-3f59CGA-xwg5-6427-25hhCGA-xwxv-vj3f-w5f9GHSA-q298-375f-5q63
Published 13-03-2025Last modified 13-03-2025
Vulnerability summary
CVE-2025-27496 is a low (CVSS 3.3) vulnerability in snowflake snowflake_jdbc. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.5% of scored vulnerabilities.
CVSS score
3.3/10
010
Low · v3.1 (CVE.org)EPSS score
0.12%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 3Timeline
- 13-03-2025PublishedVulnerability first disclosed.
- 13-03-2025Last modifiedVulnerability information updated.
Description
Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. Snowflake fixed the issue in version 3.23.1.
CVSS metrics
5 scores · 5 sources · 1 versionLow 3.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NSourcesAll 5 agree
- OSV · WolfiEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- OSV · MavenEcosystem advisory · calculated3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- NVDNIST3.3LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
0.00 pp
From 0.12% on 19-09-2026
19-09-202619-10-2026
EPSS score0.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard60 products
- flyway< 11.4.1-r0
- trino< 472-r0
- trino-config< 472-r0
- trino-oci-entrypoint< 472-r0
- trino-plugin-ai-functions< 472-r0
Wolfi60 products
- flyway< 11.4.1-r0
- trino< 472-r0
- trino-config< 472-r0
- trino-oci-entrypoint< 472-r0
- trino-plugin-ai-functions< 472-r0
Net.snowflake1 product
- snowflake-jdbc≥ 3.0.13, < 3.23.1
Snowflake1 product
- snowflake_jdbc≥ 3.0.13, < 3.23.1
Snowflakedb1 product
- snowflake-jdbc≥ 3.0.13, < 3.23.1
5 vendors · 123 products
References
5 links- github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-q298-375f-5q63X Refsource CONFIRMAdvisoryWEBVendor Advisory
- github.com/snowflakedb/snowflake-jdbc/commit/ef81582ce2f1dbc3c8794a696c94f4fe65fad507X Refsource MISCFIXWEBPatch
