Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhouse-client versions less than 0.4.6 allows unauthorized users to gain access to client certificate passwords via client exception logs. This...
Vendor
com.clickhouse vulnerabilities
1 published CVE affecting com.clickhouse, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- com.clickhouse/clickhouse-client 1
- com.clickhouse/clickhouse-jdbc 1
- com.clickhouse/clickhouse-r2dbc 1
Latest com.clickhouse CVEs
Newest publication first
-
HighCVSS 8.8 EPSS 0.68%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.