{"action":"Upgrade com.clickhouse:clickhouse-jdbc to 0.4.6 or later.","affected":[{"fixed":"0.4.6","introduced":"0"}],"component":"com.clickhouse:clickhouse-jdbc","cve_ids":["CVE-2024-23689"],"ecosystem":"Maven","epss":0.00676,"exploited":false,"fixed_versions":["0.4.6"],"ghsa_id":"GHSA-g8ph-74m6-8m7r","id":"tcs_01M5N8XSDSA2ZDEF9WYRCZJ9VM","modified_at":"2026-07-08T06:53:07.664492110Z","published_at":"2023-05-12T20:18:51Z","references":["https://osv.dev/vulnerability/GHSA-g8ph-74m6-8m7r","https://github.com/ClickHouse/clickhouse-java/security/advisories/GHSA-g8ph-74m6-8m7r","https://nvd.nist.gov/vuln/detail/CVE-2024-23689","https://github.com/ClickHouse/clickhouse-java/issues/1331","https://github.com/ClickHouse/clickhouse-java/pull/1334","https://github.com/ClickHouse/clickhouse-java","https://github.com/ClickHouse/clickhouse-java/releases/tag/v0.4.6","https://vulncheck.com/advisories/vc-advisory-GHSA-g8ph-74m6-8m7r"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-g8ph-74m6-8m7r#Maven/com.clickhouse:clickhouse-jdbc","url":"https://osv.dev/vulnerability/GHSA-g8ph-74m6-8m7r"}],"summary":"ClickHouse vulnerable to client certificate password exposure in client exception"}