{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-05-11T14:23:36", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.magnitude.com/products/data-connectivity"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"tags": ["x_refsource_MISC"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-30239", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.magnitude.com/products/data-connectivity", "refsource": "MISC", "url": "https://www.magnitude.com/products/data-connectivity"}, {"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/", "refsource": "CONFIRM", "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"name": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/", "refsource": "MISC", "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-30239", "datePublished": "2022-05-09T17:15:09", "dateReserved": "2022-05-04T00:00:00", "dateUpdated": "2022-05-11T14:23:36", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:insightsoftware:magnitude_simba_amazon_athena_jdbc_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "B07CEFD1-B8EF-4C8D-AA31-A17C7CF5374F", "versionEndExcluding": "2.0.29", "versionStartIncluding": "2.0.25", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de argumentos en el componente de autenticaci\u00f3n basado en el navegador del controlador JDBC de Magnitude Simba Amazon Athena versiones 2.0.25 hasta 2.0.28 puede permitir que un usuario local ejecute c\u00f3digo. NOTA: esto es diferente de CVE-2022-29971"}], "id": "CVE-2022-30239", "lastModified": "2022-05-18T14:18:29.817", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-09T18:15:08.783", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.magnitude.com/products/data-connectivity"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-88"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}