CVE-2023-30535 : What You Need to Know

Snowflake JDBC vulnerable to command injection via SSO URL authentication.

Understanding CVE-2023-30535

Snowflake JDBC driver, versions below 3.13.29, is susceptible to a command injection vulnerability through SSO URL authentication, allowing for remote code execution.

What is CVE-2023-30535?

Snowflake JDBC provides a JDBC type 4 driver that allows Java programs to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability where an attacker could exploit the SSO URL to execute malicious payloads remotely.

The Impact of CVE-2023-30535

The vulnerability in Snowflake JDBC driver could lead to remote code execution on the user's local machine if they accessed a malicious connection URL. This could result in severe confidentiality and integrity breaches.

Technical Details of CVE-2023-30535

Snowflake JDBC driver, versions prior to 3.13.29, are affected by the command injection vulnerability through SSO URL authentication.

Vulnerability Description

An attacker could craft a malicious server to respond with attack payloads to the SSO URL. If a user unwittingly accessed the malicious connection URL, it could lead to remote code execution on their system.

Affected Systems and Versions

Vendor: snowflakedb
Product: snowflake-jdbc
Vulnerable Versions: < 3.13.29

Exploitation Mechanism

Exploitation involves setting up a malicious server to respond to the SSO URL with attack payloads. Users visiting the crafted URL may unknowingly trigger the execution of malicious code on their systems.

Mitigation and Prevention

It is crucial for all users of the Snowflake JDBC driver to take immediate action to safeguard their systems.

Immediate Steps to Take

All users are strongly advised to upgrade the Snowflake JDBC driver to the latest patched version, 3.13.29, released on March 17, 2023.

Long-Term Security Practices

Ensure regular software updates and security patches for all applications to mitigate future vulnerabilities and risks.

Patching and Updates

Stay informed about security advisories and release notes from Snowflake to promptly address any security issues.