Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2022-29972

Description

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.

POC

Reference

- https://www.magnitude.com/products/data-connectivity

Github

- https://github.com/43622283/cloud-security-guides

- https://github.com/ARPSyndicate/cvemon

- https://github.com/SummitRoute/csp_security_mistakes

- https://github.com/YDCloudSecurity/cloud-security-guides