Lucene search

MitreCVE-2022-29971

HistoryMay 09, 2022 - 6:15 p.m.

CVE-2022-29971

2022-05-0918:15:08

CWE-88

mitre

web.nvd.nist.gov

cve-2022-29971

vulnerability

magnitude simba

amazon athena

odbc driver

code execution

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

14.2%

JSON

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.

Affected configurations

Nvd

Node

insightsoftwaremagnitude_simba_amazon_athena_odbc_driverRange1.1.1–1.1.17

VendorProductVersionCPE
insightsoftwaremagnitude_simba_amazon_athena_odbc_driver*cpe:2.3:a:insightsoftware:magnitude_simba_amazon_athena_odbc_driver:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
insightsoftware	magnitude_simba_amazon_athena_odbc_driver	*	cpe:2.3:a:insightsoftware:magnitude_simba_amazon_athena_odbc_driver::::::::

References

insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/

www.magnitude.com/products/data-connectivity

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

14.2%

JSON

Related for CVE-2022-29971