{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-05-11T14:23:36", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.magnitude.com/products/data-connectivity"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"tags": ["x_refsource_MISC"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2022-30239", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.magnitude.com/products/data-connectivity", "refsource": "MISC", "url": "https://www.magnitude.com/products/data-connectivity"}, {"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/", "refsource": "CONFIRM", "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/", "refsource": "MISC", "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T06:40:47.795Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.magnitude.com/products/data-connectivity"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-30239", "datePublished": "2022-05-09T17:15:09", "dateReserved": "2022-05-04T00:00:00", "dateUpdated": "2024-08-03T06:40:47.795Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:insightsoftware:magnitude_simba_amazon_athena_jdbc_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "B07CEFD1-B8EF-4C8D-AA31-A17C7CF5374F", "versionEndExcluding": "2.0.29", "versionStartIncluding": "2.0.25", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de argumentos en el componente de autenticaci\u00f3n basado en el navegador del controlador JDBC de Magnitude Simba Amazon Athena versiones 2.0.25 hasta 2.0.28 puede permitir que un usuario local ejecute c\u00f3digo. NOTA: esto es diferente de CVE-2022-29971"}], "id": "CVE-2022-30239", "lastModified": "2024-11-21T07:02:26.023", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-05-09T18:15:08.783", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"source": "[email protected]", "tags": ["Product"], "url": "https://www.magnitude.com/products/data-connectivity"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.magnitude.com/products/data-connectivity"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-88"}], "source": "[email protected]", "type": "Primary"}]}

{}