Lucene search
PRIOn knowledge basePRION:CVE-2023-51662HistoryDec 22, 2023 - 5:15 p.m.
Default credentials
2023-12-2217:15:00
PRIOn knowledge base
www.prio-n.com
4
snowflake
.net
driver
vulnerability
insecuremode
crl
checks
The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently received a report about a vulnerability in the Snowflake Connector .NET where the checks against the Certificate Revocation List (CRL) were not performed where the insecureMode flag was set to false, which is the default setting. The vulnerability affects versions between 2.0.25 and 2.1.4 (inclusive). Snowflake fixed the issue in version 2.1.5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snowflake_connector | ge | 2.0.25 | |
| snowflake_connector | lt | 2.1.5 |
Related
cve
cve
CVE-2023-51662
2023-12-22 17:15:10
osv
osv
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
2023-12-22 19:51:09
CVE-2023-51662
2023-12-22 17:15:10
cvelist
cvelist
nvd
nvd
CVE-2023-51662
2023-12-22 17:15:10
veracode
veracode
Improper Certificate Validation
2023-12-26 08:19:01
github
github