CVE-2025-46614

Snowflake / Snowflake ODBC PUBLISHED

Description (CNA)

In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File.

Affected (CNA)

Vendor / product	Versions
Snowflake / Snowflake ODBC	affected 0 before 3.7.0

CWE

CWE-532

References

https://community.snowflake.com/s/article/Snowflake-Connector-for-ODBC-Security-Advisory-CVE-2025-46614

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.