Potential Elevation of Privilege Vulnerability in Snowflake Hive Metastore Connector

CVE-2024-28851

What is CVE-2024-28851?

The Snowflake Hive MetaStore Connector contains a vulnerability in the helper script that could allow a malicious insider without admin privileges to exploit the system. By downloading content from a Microsoft domain and replacing it with malicious code, an attacker could manipulate the script's execution. If local access is then gained, users may inadvertently run the tampered script, leading to a potential escalation of privileges. Snowflake has addressed this issue in a patch released on February 09, 2024, though there was no version bump for the Connector. Users relying on the helper script are strongly encouraged to update to the latest version or refrain from using the script to mitigate risks.

References