Lucene search
PRIOn knowledge basePRION:CVE-2022-41828HistorySep 29, 2022 - 9:15 p.m.
Design/Logic Flaw
2022-09-2921:15:00
PRIOn knowledge base
www.prio-n.com
2
amazon aws
redshift
jdbc driver
object factory
class type
instantiation
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| amazon_web_services_redshift_java_database_connectivity_driver | lt | 2.1.0.8 |
Related
github
github
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
2022-10-12 18:23:36
ibm
ibm
osv
osv
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
2022-10-12 18:23:36
AWS Redshift JDBC Driver fails to validate class type during object instantiation
2022-09-30 00:00:20
CVE-2022-41828
2022-09-29 21:15:12
nvd
nvd
CVE-2022-41828
2022-09-29 21:15:12
veracode
veracode
Remote Code Execution (RCE)
2022-09-30 03:42:46
cve
cve
CVE-2022-41828
2022-09-29 21:15:12
cvelist
cvelist
CVE-2022-41828
2022-09-29 00:00:00