Beveiligingsadvies

CVE-2026-5485

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-03 20:13:14

Laatst bijgewerkt 2026-04-07 03:55:34

Toegewezen door AMZN

CVSS-score 7.8

Status PUBLISHED

Beschrijving

OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To remediate this issue, users should upgrade to version 2.0.5.1 or later.

← Alle CVE's bekijken Bekijk op cve.org ↗