CVE-2023-51662

    Dashboard / Vulnerabilities / CVE-2023-51662

    CVE-2023-51662

    Published: 22 Dec 2023Last Modified: 12 Aug 2026

    Summary: Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

    Details: The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently received a report about a vulnerability in the Snowflake Connector .NET where the checks against the Certificate Revocation List (CRL) were not performed where the insecureMode flag was set to false, which is the default setting. The vulnerability affects versions between 2.0.25 and 2.1.4 (inclusive). Snowflake fixed the issue in version 2.1.5.

    References: https://docs.snowflake.com/release-notes/clients-drivers/dotnet-2023#version-2-1-5-december-18-2023, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51662.json, https://github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-hwcc-4cv8-cf3h, https://nvd.nist.gov/vuln/detail/CVE-2023-51662

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 97e932015f4915cbdecf16fd4a040b26f693c67f
    Fixed -aaa32fd189247447559257de67cc1eb1facc29dc

    Affected versions

    v2.1.3
    v2.1.4
    v2.1.2
    v2.1.1
    v2.1.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-51662 | CVE-DB