CVE-2025-3717

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is not authorized being returned. This issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1.

CVSS

No CVSS.

References

Link	Resource
https://grafana.com/security/security-advisories/cve-2025-3717/

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Al usar el Plugin de Fuente de Datos de Grafana Snowflake, si el passthrough de OAuth está habilitado en la fuente de datos, y múltiples usuarios están usando la misma fuente de datos al mismo tiempo en una única instancia de Grafana, podría resultar en el uso de un identificador de usuario incorrecto, y la devolución de información para la cual el visor no está autorizado. Este problema afecta al Plugin de Fuente de Datos de Grafana Snowflake: desde 1.5.0 antes de 1.14.1.

Information

Published : 2025-11-11 21:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-3717

Mitre link : CVE-2025-3717

CVE.ORG link : CVE-2025-3717

JSON object : View

Products Affected

No product.

CWE

CWE-653

Improper Isolation or Compartmentalization

{"id": "CVE-2025-3717", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-3717", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-12T21:46:02.961565Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@grafana.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@grafana.com", "affectedData": [{"vendor": "Grafana Labs", "product": "Grafana Snowflake Datasource Plugin", "versions": [{"status": "affected", "version": "1.5.0", "lessThan": "1.14.1", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-11T21:15:37.290", "references": [{"url": "https://grafana.com/security/security-advisories/cve-2025-3717/", "source": "security@grafana.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@grafana.com", "description": [{"lang": "en", "value": "CWE-653"}]}], "descriptions": [{"lang": "en", "value": "When using the Grafana Snowflake Datasource Plugin,\nif Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it\u00a0 could result in\u00a0\n\nthe wrong user identifier being used, and information for which the viewer is not authorized being returned.\u00a0\n\nThis issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1."}, {"lang": "es", "value": "Al usar el Plugin de Fuente de Datos de Grafana Snowflake,\nsi el passthrough de OAuth est\u00e1 habilitado en la fuente de datos, y m\u00faltiples usuarios est\u00e1n usando la misma fuente de datos al mismo tiempo en una \u00fanica instancia de Grafana, podr\u00eda resultar en\n\nel uso de un identificador de usuario incorrecto, y la devoluci\u00f3n de informaci\u00f3n para la cual el visor no est\u00e1 autorizado.\n\nEste problema afecta al Plugin de Fuente de Datos de Grafana Snowflake: desde 1.5.0 antes de 1.14.1."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "security@grafana.com"}