Search criteria
3 vulnerabilities found for magnitude_simba_amazon_athena_jdbc_driver by insightsoftware
FKIE_CVE-2022-30239
Vulnerability from fkie_nvd - Published: 2022-05-09 18:15 - Updated: 2024-11-21 07:02
Severity ?
Summary
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| insightsoftware | magnitude_simba_amazon_athena_jdbc_driver | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:insightsoftware:magnitude_simba_amazon_athena_jdbc_driver:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B07CEFD1-B8EF-4C8D-AA31-A17C7CF5374F",
"versionEndExcluding": "2.0.29",
"versionStartIncluding": "2.0.25",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."
},
{
"lang": "es",
"value": "Una vulnerabilidad de inyecci\u00f3n de argumentos en el componente de autenticaci\u00f3n basado en el navegador del controlador JDBC de Magnitude Simba Amazon Athena versiones 2.0.25 hasta 2.0.28 puede permitir que un usuario local ejecute c\u00f3digo. NOTA: esto es diferente de CVE-2022-29971"
}
],
"id": "CVE-2022-30239",
"lastModified": "2024-11-21T07:02:26.023",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-05-09T18:15:08.783",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"source": "cve@mitre.org",
"tags": [
"Product"
],
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
],
"url": "https://www.magnitude.com/products/data-connectivity"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-88"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2022-30239 (GCVE-0-2022-30239)
Vulnerability from cvelistv5 – Published: 2022-05-09 17:15 – Updated: 2024-08-03 06:40
VLAI?
Summary
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:40:47.795Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-11T14:23:36",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-30239",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.magnitude.com/products/data-connectivity",
"refsource": "MISC",
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/",
"refsource": "CONFIRM",
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/",
"refsource": "MISC",
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-30239",
"datePublished": "2022-05-09T17:15:09",
"dateReserved": "2022-05-04T00:00:00",
"dateUpdated": "2024-08-03T06:40:47.795Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-30239 (GCVE-0-2022-30239)
Vulnerability from nvd – Published: 2022-05-09 17:15 – Updated: 2024-08-03 06:40
VLAI?
Summary
An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:40:47.795Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-11T14:23:36",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-30239",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.magnitude.com/products/data-connectivity",
"refsource": "MISC",
"url": "https://www.magnitude.com/products/data-connectivity"
},
{
"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/",
"refsource": "CONFIRM",
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
},
{
"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/",
"refsource": "MISC",
"url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-30239",
"datePublished": "2022-05-09T17:15:09",
"dateReserved": "2022-05-04T00:00:00",
"dateUpdated": "2024-08-03T06:40:47.795Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}