Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37344
HistorySep 30, 2022 - 3:42 a.m.

Remote Code Execution (RCE)

2022-09-3003:42:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
35
remote code execution
redshift-jdbc42
makessl.java
verifypeername
object factory
software security

0.002 Low

EPSS

Percentile

59.6%

redshift-jdbc42 is vulnerable to remote code execution. The vulnerability exists because the verifyPeerName function of MakeSSL.java does not properly check the class type when instantiating an object from a class name, allowing an attacker to inject and execute malicious code through the object factory.

0.002 Low

EPSS

Percentile

59.6%

Related for VERACODE:37344