PT-2022-20028 · Magnitude Simba · Magnitude Simba Amazon Athena Jdbc Driver

Published 2022-05-09 · Updated 2022-05-18 · CVE-2022-30239

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena JDBC Driver versions 2.0.25 through 2.0.28

Description An argument injection issue in the browser-based authentication component may allow a local user to execute code.

Recommendations For Magnitude Simba Amazon Athena JDBC Driver versions 2.0.25 through 2.0.28, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2022-30239

Affected Products

Magnitude Simba Amazon Athena Jdbc Driver

References · 5

• https://osv.dev/vulnerability/CVE-2022-30239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30239 · Security Note
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability · Vendor Advisory
• https://t.me/cibsecurity/42203 · Telegram Post
• https://magnitude.com/products/data-connectivity · Note