CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-23689

Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This occurs when 'sslkey' is specified and an exception, such as a ClickHouseException or SQLException, is thrown during database operations; the certificate password is then included in the logged exception message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.6%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2024-23689

Clickhouse » Java Libraries » Version: N/A

cpe:2.3:a:clickhouse:java_libraries:-
Clickhouse » Java Libraries » Version: 0.1.13

cpe:2.3:a:clickhouse:java_libraries:0.1.13
Clickhouse » Java Libraries » Version: 0.1.14

cpe:2.3:a:clickhouse:java_libraries:0.1.14
Clickhouse » Java Libraries » Version: 0.1.15

cpe:2.3:a:clickhouse:java_libraries:0.1.15
Clickhouse » Java Libraries » Version: 0.1.16

cpe:2.3:a:clickhouse:java_libraries:0.1.16
Clickhouse » Java Libraries » Version: 0.1.17

cpe:2.3:a:clickhouse:java_libraries:0.1.17
Clickhouse » Java Libraries » Version: 0.1.18

cpe:2.3:a:clickhouse:java_libraries:0.1.18
Clickhouse » Java Libraries » Version: 0.1.19

cpe:2.3:a:clickhouse:java_libraries:0.1.19
Clickhouse » Java Libraries » Version: 0.1.20

cpe:2.3:a:clickhouse:java_libraries:0.1.20
Clickhouse » Java Libraries » Version: 0.1.21

cpe:2.3:a:clickhouse:java_libraries:0.1.21
Clickhouse » Java Libraries » Version: 0.1.22

cpe:2.3:a:clickhouse:java_libraries:0.1.22
Clickhouse » Java Libraries » Version: 0.1.23

cpe:2.3:a:clickhouse:java_libraries:0.1.23
Clickhouse » Java Libraries » Version: 0.1.24

cpe:2.3:a:clickhouse:java_libraries:0.1.24
Clickhouse » Java Libraries » Version: 0.1.25

cpe:2.3:a:clickhouse:java_libraries:0.1.25
Clickhouse » Java Libraries » Version: 0.1.26

cpe:2.3:a:clickhouse:java_libraries:0.1.26
Clickhouse » Java Libraries » Version: 0.1.27

cpe:2.3:a:clickhouse:java_libraries:0.1.27
Clickhouse » Java Libraries » Version: 0.1.28

cpe:2.3:a:clickhouse:java_libraries:0.1.28
Clickhouse » Java Libraries » Version: 0.1.29

cpe:2.3:a:clickhouse:java_libraries:0.1.29
Clickhouse » Java Libraries » Version: 0.1.30

cpe:2.3:a:clickhouse:java_libraries:0.1.30
Clickhouse » Java Libraries » Version: 0.1.31

cpe:2.3:a:clickhouse:java_libraries:0.1.31
Clickhouse » Java Libraries » Version: 0.1.32

cpe:2.3:a:clickhouse:java_libraries:0.1.32
Clickhouse » Java Libraries » Version: 0.1.33

cpe:2.3:a:clickhouse:java_libraries:0.1.33
Clickhouse » Java Libraries » Version: 0.1.34

cpe:2.3:a:clickhouse:java_libraries:0.1.34
Clickhouse » Java Libraries » Version: 0.1.36

cpe:2.3:a:clickhouse:java_libraries:0.1.36
Clickhouse » Java Libraries » Version: 0.1.37

cpe:2.3:a:clickhouse:java_libraries:0.1.37
Clickhouse » Java Libraries » Version: 0.1.38

cpe:2.3:a:clickhouse:java_libraries:0.1.38
Clickhouse » Java Libraries » Version: 0.1.39

cpe:2.3:a:clickhouse:java_libraries:0.1.39
Clickhouse » Java Libraries » Version: 0.1.40

cpe:2.3:a:clickhouse:java_libraries:0.1.40
Clickhouse » Java Libraries » Version: 0.1.41

cpe:2.3:a:clickhouse:java_libraries:0.1.41
Clickhouse » Java Libraries » Version: 0.1.42

cpe:2.3:a:clickhouse:java_libraries:0.1.42
Clickhouse » Java Libraries » Version: 0.1.43

cpe:2.3:a:clickhouse:java_libraries:0.1.43
Clickhouse » Java Libraries » Version: 0.1.44

cpe:2.3:a:clickhouse:java_libraries:0.1.44
Clickhouse » Java Libraries » Version: 0.1.45

cpe:2.3:a:clickhouse:java_libraries:0.1.45
Clickhouse » Java Libraries » Version: 0.1.46

cpe:2.3:a:clickhouse:java_libraries:0.1.46
Clickhouse » Java Libraries » Version: 0.1.47

cpe:2.3:a:clickhouse:java_libraries:0.1.47
Clickhouse » Java Libraries » Version: 0.1.48

cpe:2.3:a:clickhouse:java_libraries:0.1.48
Clickhouse » Java Libraries » Version: 0.1.49

cpe:2.3:a:clickhouse:java_libraries:0.1.49
Clickhouse » Java Libraries » Version: 0.1.50

cpe:2.3:a:clickhouse:java_libraries:0.1.50
Clickhouse » Java Libraries » Version: 0.1.51

cpe:2.3:a:clickhouse:java_libraries:0.1.51
Clickhouse » Java Libraries » Version: 0.1.52

cpe:2.3:a:clickhouse:java_libraries:0.1.52
Clickhouse » Java Libraries » Version: 0.1.53

cpe:2.3:a:clickhouse:java_libraries:0.1.53
Clickhouse » Java Libraries » Version: 0.1.54

cpe:2.3:a:clickhouse:java_libraries:0.1.54
Clickhouse » Java Libraries » Version: 0.1.55

cpe:2.3:a:clickhouse:java_libraries:0.1.55
Clickhouse » Java Libraries » Version: 0.2

cpe:2.3:a:clickhouse:java_libraries:0.2
Clickhouse » Java Libraries » Version: 0.2.2

cpe:2.3:a:clickhouse:java_libraries:0.2.2
Clickhouse » Java Libraries » Version: 0.2.3

cpe:2.3:a:clickhouse:java_libraries:0.2.3
Clickhouse » Java Libraries » Version: 0.2.4

cpe:2.3:a:clickhouse:java_libraries:0.2.4
Clickhouse » Java Libraries » Version: 0.2.5

cpe:2.3:a:clickhouse:java_libraries:0.2.5
Clickhouse » Java Libraries » Version: 0.2.6

cpe:2.3:a:clickhouse:java_libraries:0.2.6
Clickhouse » Java Libraries » Version: 0.3.0

cpe:2.3:a:clickhouse:java_libraries:0.3.0
Clickhouse » Java Libraries » Version: 0.3.1

cpe:2.3:a:clickhouse:java_libraries:0.3.1
Clickhouse » Java Libraries » Version: 0.3.2

cpe:2.3:a:clickhouse:java_libraries:0.3.2
Clickhouse » Java Libraries » Version: 0.4.0

cpe:2.3:a:clickhouse:java_libraries:0.4.0
Clickhouse » Java Libraries » Version: 0.4.1

cpe:2.3:a:clickhouse:java_libraries:0.4.1
Clickhouse » Java Libraries » Version: 0.4.2

cpe:2.3:a:clickhouse:java_libraries:0.4.2
Clickhouse » Java Libraries » Version: 0.4.3

cpe:2.3:a:clickhouse:java_libraries:0.4.3
Clickhouse » Java Libraries » Version: 0.4.4

cpe:2.3:a:clickhouse:java_libraries:0.4.4
Clickhouse » Java Libraries » Version: 0.4.5

cpe:2.3:a:clickhouse:java_libraries:0.4.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-23689

Products

Pricing

Contact Us