7.8
Élevée
CVE-2026-5485 OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on…
Description
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To remediate this issue, users should upgrade to version 2.0.5.1 or later.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Amazon Athena ODBC driver 2.0 | premières → < 2.0.5.1 | 2.0.5.1 |
Autres CVE de Amazon Athena ODBC driver
Les 6 CVE de Amazon Athena ODBC driver →
CVE-2026-35558
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0…
7.8
Élevée
CVE-2026-35559
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a…
6.5
Moyenne
CVE-2026-35562
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow…
7.5
Élevée
CVE-2026-35561
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC…
7.4
Élevée