Vulnerabilities

TI-2024-14986 CVE-2024-22412

ClickHouse's Role-based Access Control is bypassed when query caching is enabled.

MEDIUM 56

ClickHouse is an open-source column-oriented database management system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00587 Published 2024-03-18 Fixed in 24.0.2.54535 CWE-863

TI-2023-26543 CVE-2023-48704

LOW 33

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00495 Published 2023-12-22 Fixed in 23.9.2.47551, 23.10.5.20 +3 CWE-120

TI-2023-26161 CVE-2023-48298

LOW 34

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00634 Published 2023-12-21 No fix listed CWE-191

TI-2023-25458 CVE-2023-47118

MEDIUM 42

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00462 Published 2023-12-20 Fixed in 23.3.16.7-lts CWE-122