2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Grafana Snowflake Datasource Plugin","vendor":"Grafana Labs","versions":[{"lessThan":"1.14.1","status":"affected","version":"1.5.0","versionType":"semver"}]}],"source":"security@grafana.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"When using the Grafana Snowflake Datasource Plugin,\nif Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in \n\nthe wrong user identifier being used, and information for which the viewer is not authorized being returned. \n\nThis issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1."},{"lang":"es","value":"Al usar el Plugin de Fuente de Datos de Grafana Snowflake,\nsi el passthrough de OAuth está habilitado en la fuente de datos, y múltiples usuarios están usando la misma fuente de datos al mismo tiempo en una única instancia de Grafana, podría resultar en\n\nel uso de un identificador de usuario incorrecto, y la devolución de información para la cual el visor no está autorizado.\n\nEste problema afecta al Plugin de Fuente de Datos de Grafana Snowflake: desde 1.5.0 antes de 1.14.1."}],"id":"CVE-2025-3717","lastModified":"2026-10-18T20:10:00.110","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":2.1,"baseSeverity":"LOW","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"source":"security@grafana.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3717","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-11-12T21:46:02.961565Z","version":"2.0.3"}}]},"published":"2025-11-11T21:15:37.290","references":[{"source":"security@grafana.com","url":"https://grafana.com/security/security-advisories/cve-2025-3717/"}],"sourceIdentifier":"security@grafana.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-653"}],"source":"security@grafana.com","type":"Secondary"}]}
|