PT-2022-26085 · Amazon · Amazon Redshift Jdbc Driver

Plygrnd · Published 2022-09-29 · Updated 2025-05-20 · CVE-2022-41828

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Amazon AWS Redshift JDBC Driver versions prior to 2.1.0.8

Description The Object Factory in the Amazon AWS Redshift JDBC Driver does not check the class type when instantiating an object from a class name. This issue can lead to a potential remote command execution problem when plugins are used with the driver. The driver instantiates plugin instances based on Java class names provided via the sslhostnameverifier, socketFactory, sslfactory, and sslpasswordcallback connection properties without verifying if a plugin class implements the expected interface before instantiation. This can allow a knowledgeable attacker with control over the JDBC URL to load arbitrary Java classes and achieve remote code execution.

Recommendations To resolve the issue, upgrade to Amazon AWS Redshift JDBC Driver version 2.1.0.8 or above. There are no known workarounds for this issue, so upgrading to the patched version is the recommended course of action. If you are using plugins with the driver, it is especially important to upgrade to version 2.1.0.8 or above to prevent potential remote code execution.

Exploit

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

CVE-2022-41828

GHSA-5C6Q-F783-H888

GHSA-JC69-HJW2-FM86

Affected Products

Amazon Redshift Jdbc Driver

References · 11

• 🔥 https://github.com/murataydemir/CVE-2022-41828 · Exploit
• https://github.com/aws/amazon-redshift-jdbc-driver/commit/40b143b4698faf90c788ffa89f2d4d8d2ad068b5 · Patch
• https://osv.dev/vulnerability/GHSA-jc69-hjw2-fm86 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41828 · Security Note
• https://osv.dev/vulnerability/GHSA-5c6q-f783-h888 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41828 · Vendor Advisory
• https://github.com/aws/amazon-redshift-jdbc-driver · Note
• https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-jc69-hjw2-fm86 · Note
• https://github.com/aws/amazon-redshift-jdbc-driver/commit/9999659bbc9f3d006fb02a0bf39d5bcf3b503605 · Note
• https://t.me/cibsecurity/50746 · Telegram Post
• https://t.me/cvenotify/123136 · Telegram Post