CVE-2022-29971 - An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code

Back Back to CVE browser

HIGH

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code

Published May 9, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-88

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34277
Advisory
https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
x_refsource_CONFIRMVendor Advisory
https://www.magnitude.com/products/data-connectivity
x_refsource_MISCProduct

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34277		Advisory
https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/		x_refsource_CONFIRMVendor Advisory
https://www.magnitude.com/products/data-connectivity		x_refsource_MISCProduct