Design/Logic Flaw

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971...

CVE-2022-30239

CVE-2022-30239 describes an argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver, affected in versions 2.0.25 through 2.0.28. The underlying issue enables a local user to execute code due to improper handling in the authen...

CVE-2022-30239

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971...

CVE-2022-29971

CVE-2022-29971 affects the Magnitude Simba Amazon Athena ODBC Driver, versions 1.1.1 through 1.1.x before 1.1.17, with an argument injection vulnerability in the browser-based authentication component that may allow a local user to execute arbitrary code. Root cause per description: improper hand...

Magnitude Simba Amazon Athena JDBC Driver 参数注入漏洞

Magnitude Simba Amazon Athena JDBC Driver is a JDBC driver from Magnitude, Inc. It is used to connect to live Amazon Athena data directly from any application that supports JDBC connections. A parameter injection vulnerability exists in Magnitude Simba Amazon Athena JDBC Driver versions 2.0.25...

PT-2022-20028

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena JDBC Driver versions 2.0.25 through 2.0.28 Description An argument injection issue in the browser-based authentication component may allow a local user to execute code. Recommendations For Magnitude Simba Amazon...

CVE-2022-29971: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code...

CVE-2022-30239: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971...

PT-2022-19935

Name of the Vulnerable Software and Affected Versions Magnitude Simba Amazon Athena ODBC Driver versions 1.1.1 through 1.1.x before 1.1.17 Description An argument injection vulnerability in the browser-based authentication component may allow a local user to execute arbitrary code. Recommendation...