PT-2022-19935 · Magnitude Simba · Magnitude Simba Amazon Athena Jdbc Driver

Published 2022-05-09 · Updated 2022-05-18 · CVE-2022-29971

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena ODBC Driver versions 1.1.1 through 1.1.x before 1.1.17

Description An argument injection vulnerability in the browser-based authentication component may allow a local user to execute arbitrary code.

Recommendations For Magnitude Simba Amazon Athena ODBC Driver versions 1.1.1 through 1.1.x before 1.1.17, update to version 1.1.17 or later to resolve the issue.

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2022-29971

Affected Products

Magnitude Simba Amazon Athena Jdbc Driver

References · 7

• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29971 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29971 · Vendor Advisory
• https://t.me/cibsecurity/42203 · Telegram Post
• https://t.me/cibsecurity/42204 · Telegram Post
• https://t.me/cvenotify/30394 · Telegram Post
• https://magnitude.com/products/data-connectivity · Note