CVE-2024-43382

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-326

Affected software

No affected versions have been published.

Timeline

Published
Oct 30, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-433838.1Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library:CVE-2024-433848.0A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.CVE-2024-433858.8A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elemenCVE-2024-433868.8A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elemenCVE-2024-433878.8A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RCVE-2024-433888.8A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation.CVE-2024-433898.1A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY, OSPF_INTERFACE.DIGCVE-2024-43395.4The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to StoredCVE-2024-433908.1A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding or NAT through the CVE-2024-433918.1A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, netCVE-2024-433928.1A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, netCVE-2024-433938.1A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, packet forwarding, net
CVE-2024-43382: Medium severity, CVSS 5.9 | Vulnix