7.4
Élevée
CVE-2026-35561 Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC…
Description
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediate this issue, users should upgrade to version 2.1.0.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Amazon Athena ODBC driver 2.1 | premières → < 2.1.0.0 | 2.1.0.0 |
Autres CVE de Amazon Athena ODBC driver
Les 6 CVE de Amazon Athena ODBC driver →
CVE-2026-35558
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0…
7.8
Élevée
CVE-2026-35559
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a…
6.5
Moyenne
CVE-2026-5485
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on…
7.8
Élevée
CVE-2026-35562
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow…
7.5
Élevée