CVE-2022-29972

Description from NVD

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.

Information Acquisition Date:2022-05-31T16:40Z

CVSS 2.0: 7.2 HIGH CVSS 3.x: 7.8 HIGH

▼ CVSS3 Vec CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector (AV)	Network	Adjacent	Local	Physical
Attack Complexity (AC)	LOW	High
Privileges Required (PR)	None	Low	High
User Interaction (UI)	None	Required
Scope (S)	Unchange	Change
Confidentiality (C)	None	Low	High
Integrity (I)	None	Low	High
Availability (A)	None	Low	High

▼ CVSS2 Vec AV:L/AC:L/Au:N/C:C/I:C/A:C

Attack Vector (AV)	Network	Adjacent	Local
Access Complexity (AC)	Low	Medium	High
Authentication (Au)	None	Single	Multiple
Confidentiality (C)	None	Partial	Complete
Integrity (I)	None	Partial	Complete
Availability (A)	None	Partial	Complete

NVD References

https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/
source:CONFIRM
tags:Vendor Advisory

https://www.magnitude.com/products/data-connectivity
source:MISC
tags:Product

Refer to Information on External Sites

CVE Infomation	Exploits or more Infomation
mitre	EXPLOIT DATABASE
NVD	0day.today
vulmon.com	github
CVE Details	Twitter
JVN ENG JPN
Reconshell

Software Tag: Windows(1 tweets) iOS(1 tweets)

List of frequently cited URLs

URL	Num of Times Referred to
https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so...	200
https://cvetrends.com	53
https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	21
https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	7
https://twitter.com/BleepinComputer/status/1523720197160509442	4
https://orca.security/resources/blog/azure-synapse-analytic...	3

▼ Show Information from Twitter(106)

User	URL	Info Source	Date
RigneySec	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source RigneySec 1523695313189584896	2022/05/10
seguridad_si	https://zpr.io/qkekk3amSaT7	Source seguridad_si 1523697226589130752	2022/05/10
StopMalvertisin	https://stpmvt.com/3kRcSID	Source StopMalvertisin 1523701945344663553	2022/05/10
omvapt	https://vapt.me/AzureSynapse	Source omvapt 1523702998903443456	2022/05/10
omvapt	https://twitter.com/omvapt/status/1523702998903443456/photo/1	Source omvapt 1523702998903443456	2022/05/10
xchachignon	https://bit.ly/3wi5rQ7	Source xchachignon 1523705188820963330	2022/05/10
IT_securitynews	https://www.itsecuritynews.info/vulnerability-mitigated-in-...	Source IT_securitynews 1523711850650734597	2022/05/10
rodtrent	https://cda.ms/4fd	Source rodtrent 1523715222455922688	2022/05/10
SasStu	https://bit.ly/3Fypy0K	Source SasStu 1523715682495459328	2022/05/10
CVEreport	https://cve.report/CVE-2022-29972	Source CVEreport 1523726950359085056	2022/05/10
VulmonFeeds	https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so...	Source VulmonFeeds 1523733692358836225	2022/05/10
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2022-29972	Source threatintelctr 1523735366213287936	2022/05/10
cyber_edu_jp	https://msrc.microsoft.com/update-guide/vulnerability/ADV22...	Source cyber_edu_jp 1523747022222028800	2022/05/10
CVEnew	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29972	Source CVEnew 1523750961910534144	2022/05/10
azuminoICT	http://dlvr.it/SQ305m	Source azuminoICT 1523757711468376064	2022/05/10
TzahPahima	https://orca.security/resources/blog/azure-synapse-analytic...	Source TzahPahima 1523761131478974464	2022/05/10
TzahPahima	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source TzahPahima 1523761133202464769	2022/05/10
orcasec	https://orca.security/resources/blog/azure-synapse-analytic...	Source orcasec 1523762387177799680	2022/05/10
LanceSchukies	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source LanceSchukies 1523773553778307074	2022/05/10
staby	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source staby 1523779461904146432	2022/05/10
vulnonym	None	Source vulnonym 1523792167805796352	2022/05/10
david_obrien	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source david_obrien 1523792299616251904	2022/05/10
EurekaBerry	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source EurekaBerry 1523812839995379712	2022/05/10
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1523863214274011138	2022/05/10
WolfgangSesin	https://www.sesin.at/2022/05/10/cve-2022-29972	Source WolfgangSesin 1523863214274011138	2022/05/10
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1523863215507132417	2022/05/10
www_sesin_at	https://www.sesin.at/2022/05/10/cve-2022-29972	Source www_sesin_at 1523863215507132417	2022/05/10
minamijoyo	https://htn.to/3NpUkz9UvY	Source minamijoyo 1523866827717496833	2022/05/10
kawn2020	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2...	Source kawn2020 1523870447112052736	2022/05/10
Secnewsbytes	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source Secnewsbytes 1523898489322807296	2022/05/10
Mariusz_Ferdyn	https://orca.security/resources/blog/azure-synapse-analytic...	Source Mariusz_Ferdyn 1523911431791562755	2022/05/10
hernanespinoza	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29972	Source hernanespinoza 1523923581725556736	2022/05/10
MisterSnags	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source MisterSnags 1523933769664806912	2022/05/10
tsunomur	https://ift.tt/DXL2HZJ	Source tsunomur 1523934072266973186	2022/05/10
PaulomorgadoN	http://dlvr.it/SQ4NCH	Source PaulomorgadoN 1523934882635821057	2022/05/10
threatintel	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source threatintel 1523956121068785666	2022/05/10
IM_23pds	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source IM_23pds 1523957325534425088	2022/05/10
IT_news_for_all	https://t.me/s/it_news_for_all/47350	Source IT_news_for_all 1523966226778701826	2022/05/10
TheHackersNews	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source TheHackersNews 1523966554538344448	2022/05/10
_DrFrusci	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source _DrFrusci 1523966642035830788	2022/05/10
trip_elix	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source trip_elix 1523966772122202114	2022/05/10
DenSkyrda	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source DenSkyrda 1523968167323873281	2022/05/10
Swati_THN	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source Swati_THN 1523971357083459584	2022/05/10
FrankSEC42	https://lnkd.in/enNn7YNR	Source FrankSEC42 1523977922050207744	2022/05/10
FrankSEC42	https://lnkd.in/e8CeZCpM	Source FrankSEC42 1523977922050207744	2022/05/10
wilfriedwoivre	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source wilfriedwoivre 1523988728045359104	2022/05/10
ipssignatures	https://twitter.com/search?src=sprv&q=CVE-2022-29972	Source ipssignatures 1523997281514672128	2022/05/10
ipssignatures	https://twitter.com/TheHackersNews/status/1523966554538344448	Source ipssignatures 1523997282433216513	2022/05/10
jeanclaudebpro	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source jeanclaudebpro 1524003103246270464	2022/05/10
CVEtrends	https://cvetrends.com	Source CVEtrends 1524011385704886273	2022/05/10
unix_root	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source unix_root 1524016907405475840	2022/05/10
Har_sia	https://har-sia.info/CVE-2022-29972.html	Source Har_sia 1524042870860115968	2022/05/11
security_wang	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source security_wang 1524047106394267649	2022/05/11
qualys	https://fal.cn/3ouEi	Source qualys 1524081412114202625	2022/05/11
qualys	https://twitter.com/qualys/status/1524081412114202625/photo/1	Source qualys 1524081412114202625	2022/05/11
shah_sheikh	https://blog.qualys.com/vulnerabilities-threat-research/202...	Source shah_sheikh 1524110044861665280	2022/05/11
shah_sheikh	https://twitter.com/shah_sheikh/status/1524110044861665280/...	Source shah_sheikh 1524110044861665280	2022/05/11
MattBurcke	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source MattBurcke 1524124595300835329	2022/05/11
MalwarePatrol	https://thehackernews.com/2022/05/microsoft-mitigates-rce-v...	Source MalwarePatrol 1524147520896647168	2022/05/11
moton	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source moton 1524170831856762881	2022/05/11
ikatzsolutions	https://msrc.microsoft.com/update-guide/en-US/vulnerability...	Source ikatzsolutions 1524174137018941440	2022/05/11
ikatzsolutions	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2...	Source ikatzsolutions 1524174137018941440	2022/05/11
eyalestrin	https://ift.tt/VyDEnwt	Source eyalestrin 1524264896074072066	2022/05/11
mrericgold	https://twitter.com/BleepinComputer/status/1523720197160509442	Source mrericgold 1524290665131257856	2022/05/11
mrericgold	https://sprou.tt/1tCXQI0880b	Source mrericgold 1524290665131257856	2022/05/11
__seyyid__	https://vrgl.ir/YwyRw	Source __seyyid__ 1524291531225673729	2022/05/11
RedPacketSec	https://www.redpacketsecurity.com/magnitude-simba-amazon-re...	Source RedPacketSec 1524313874958364673	2022/05/11
virusmyths	https://blog.naver.com/nologout/222728485937	Source virusmyths 1524325936497250305	2022/05/11
virusmyths	http://naver.me/xTlFIL27	Source virusmyths 1524325936497250305	2022/05/11
ZacOrcaSecurity	https://twitter.com/BleepinComputer/status/1523720197160509442	Source ZacOrcaSecurity 1524365867663998977	2022/05/11
ZacOrcaSecurity	https://sprou.tt/14W6YmA7s6q	Source ZacOrcaSecurity 1524365867663998977	2022/05/11
ZacOrcaSecurity	https://sprou.tt/1gChDB0UX2Q	Source ZacOrcaSecurity 1524366026800041984	2022/05/11
deborah_galea	https://sprou.tt/1fSRNBrLWjX	Source deborah_galea 1524373775176933378	2022/05/11
mrericgold	https://sprou.tt/1cLIGwwq5wU	Source mrericgold 1524379097299927042	2022/05/11
kabukawa	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source kabukawa 1524407291080232960	2022/05/12
CyberSecDN	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source CyberSecDN 1524536600931102720	2022/05/12
shah_sheikh	https://gbhackers.com/vulnerability-in-azure-synapse/?utm_s...	Source shah_sheikh 1524619266665828352	2022/05/12
shah_sheikh	https://twitter.com/shah_sheikh/status/1524619266665828352/...	Source shah_sheikh 1524619266665828352	2022/05/12
ABartlam007	https://lnkd.in/eicaqDee	Source ABartlam007 1524711995735425024	2022/05/12
ABartlam007	https://lnkd.in/ez9rZczN	Source ABartlam007 1524711995735425024	2022/05/12
DTS_Solution	https://cloudsecurityalliance.org/articles/security-advisor...	Source DTS_Solution 1524766486090293256	2022/05/13
DTS_Solution	https://twitter.com/DTS_Solution/status/1524766486090293256...	Source DTS_Solution 1524766486090293256	2022/05/13
deborah_galea	https://cloudsecurityalliance.org/articles/security-advisor...	Source deborah_galea 1524867128200810496	2022/05/13
CyberSecDN	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source CyberSecDN 1525185804858822657	2022/05/14
2rkiva	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source 2rkiva 1525186655514148867	2022/05/14
CyberSecDN	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source CyberSecDN 1525850125297254401	2022/05/15
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1526369943729627136	2022/05/17
WolfgangSesin	https://www.sesin.at/2022/05/17/vulnerability-mitigated-in-...	Source WolfgangSesin 1526369943729627136	2022/05/17
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1526369945260638210	2022/05/17
www_sesin_at	https://www.sesin.at/2022/05/17/vulnerability-mitigated-in-...	Source www_sesin_at 1526369945260638210	2022/05/17
CyberSecDN	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source CyberSecDN 1526522015070314496	2022/05/17
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2022-29972	Source threatintelctr 1526936463505498114	2022/05/18
RemotelyAlerts	http://alerts.remotelyrmm.com/CVE-2022-29972	Source RemotelyAlerts 1526948090384551937	2022/05/19
cloudsa	https://bit.ly/3LkIQrH	Source cloudsa 1526980528351608833	2022/05/19
deborah_galea	https://twitter.com/BleepinComputer/status/1523720197160509442	Source deborah_galea 1527272872812679169	2022/05/19
deborah_galea	https://sprou.tt/1usOIKFxpDg	Source deborah_galea 1527272872812679169	2022/05/19
CyberSecDN	https://msrc-blog.microsoft.com/2022/05/09/vulnerability-mi...	Source CyberSecDN 1527552507890741248	2022/05/20
iototsecnews	http://iototsecnews.jp/2022/05/09/microsoft-releases-fixes-...	Source iototsecnews 1527987061243883520	2022/05/21
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1528365172187971584	2022/05/22
WolfgangSesin	https://www.sesin.at/2022/05/22/cve-2022-29972-magnitude_si...	Source WolfgangSesin 1528365172187971584	2022/05/22
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1528365173534298113	2022/05/22
www_sesin_at	https://www.sesin.at/2022/05/22/cve-2022-29972-magnitude_si...	Source www_sesin_at 1528365173534298113	2022/05/22
RyanChauvinWork	https://twitter.com/BleepinComputer/status/1523720197160509442	Source RyanChauvinWork 1529084808659337216	2022/05/24
RyanChauvinWork	https://sprou.tt/1K4xCJPwUE1	Source RyanChauvinWork 1529084808659337216	2022/05/24
RyanChauvinWork	https://sprou.tt/1000fFKj6PE	Source RyanChauvinWork 1529447196617211904	2022/05/25
__kokumoto	https://www.theregister.com/2022/06/14/security_azure_patch	Source __kokumoto 1536740944875098112	2022/06/15

List of frequently cited URLs

URL	Num of Times Referred to
alerts.vulmon.com	200
cvetrends.com	53
msrc-blog.microsoft.com	21
thehackernews.com	7
twitter.com	4
orca.security	3

▼ Show Information from Twitter(106)

User	URL	Info Source
RigneySec	msrc-blog.microsoft.com	Show Tweet
seguridad_si	zpr.io	Show Tweet
StopMalvertisin	stpmvt.com	Show Tweet
omvapt	vapt.me	Show Tweet
omvapt	twitter.com	Show Tweet
xchachignon	bit.ly	Show Tweet
IT_securitynews	itsecuritynews.info	Show Tweet
rodtrent	cda.ms	Show Tweet
SasStu	bit.ly	Show Tweet
CVEreport	cve.report	Show Tweet
VulmonFeeds	alerts.vulmon.com	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet
cyber_edu_jp	msrc.microsoft.com	Show Tweet
CVEnew	cve.mitre.org	Show Tweet
azuminoICT	dlvr.it	Show Tweet
TzahPahima	orca.security	Show Tweet
TzahPahima	msrc-blog.microsoft.com	Show Tweet
orcasec	orca.security	Show Tweet
LanceSchukies	msrc-blog.microsoft.com	Show Tweet
staby	msrc-blog.microsoft.com	Show Tweet
vulnonym		Show Tweet
david_obrien	msrc-blog.microsoft.com	Show Tweet
EurekaBerry	msrc-blog.microsoft.com	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
minamijoyo	htn.to	Show Tweet
kawn2020	msrc.microsoft.com	Show Tweet
Secnewsbytes	msrc-blog.microsoft.com	Show Tweet
Mariusz_Ferdyn	orca.security	Show Tweet
hernanespinoza	cve.mitre.org	Show Tweet
MisterSnags	msrc-blog.microsoft.com	Show Tweet
tsunomur	ift.tt	Show Tweet
PaulomorgadoN	dlvr.it	Show Tweet
threatintel	msrc-blog.microsoft.com	Show Tweet
IM_23pds	msrc-blog.microsoft.com	Show Tweet
IT_news_for_all	t.me	Show Tweet
TheHackersNews	thehackernews.com	Show Tweet
_DrFrusci	thehackernews.com	Show Tweet
trip_elix	thehackernews.com	Show Tweet
DenSkyrda	msrc-blog.microsoft.com	Show Tweet
Swati_THN	thehackernews.com	Show Tweet
FrankSEC42	lnkd.in	Show Tweet
FrankSEC42	lnkd.in	Show Tweet
wilfriedwoivre	msrc-blog.microsoft.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
jeanclaudebpro	msrc-blog.microsoft.com	Show Tweet
CVEtrends	cvetrends.com	Show Tweet
unix_root	thehackernews.com	Show Tweet
Har_sia	har-sia.info	Show Tweet
security_wang	thehackernews.com	Show Tweet
qualys	fal.cn	Show Tweet
qualys	twitter.com	Show Tweet
shah_sheikh	blog.qualys.com	Show Tweet
shah_sheikh	twitter.com	Show Tweet
MattBurcke	msrc-blog.microsoft.com	Show Tweet
MalwarePatrol	thehackernews.com	Show Tweet
moton	msrc-blog.microsoft.com	Show Tweet
ikatzsolutions	msrc.microsoft.com	Show Tweet
ikatzsolutions	msrc.microsoft.com	Show Tweet
eyalestrin	ift.tt	Show Tweet
mrericgold	twitter.com	Show Tweet
mrericgold	sprou.tt	Show Tweet
__seyyid__	vrgl.ir	Show Tweet
RedPacketSec	redpacketsecurity.com	Show Tweet
virusmyths	blog.naver.com	Show Tweet
virusmyths	naver.me	Show Tweet
ZacOrcaSecurity	twitter.com	Show Tweet
ZacOrcaSecurity	sprou.tt	Show Tweet
ZacOrcaSecurity	sprou.tt	Show Tweet
deborah_galea	sprou.tt	Show Tweet
mrericgold	sprou.tt	Show Tweet
kabukawa	msrc-blog.microsoft.com	Show Tweet
CyberSecDN	msrc-blog.microsoft.com	Show Tweet
shah_sheikh	gbhackers.com	Show Tweet
shah_sheikh	twitter.com	Show Tweet
ABartlam007	lnkd.in	Show Tweet
ABartlam007	lnkd.in	Show Tweet
DTS_Solution	cloudsecurityalliance.org	Show Tweet
DTS_Solution	twitter.com	Show Tweet
deborah_galea	cloudsecurityalliance.org	Show Tweet
CyberSecDN	msrc-blog.microsoft.com	Show Tweet
2rkiva	msrc-blog.microsoft.com	Show Tweet
CyberSecDN	msrc-blog.microsoft.com	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
CyberSecDN	msrc-blog.microsoft.com	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet
RemotelyAlerts	alerts.remotelyrmm.com	Show Tweet
cloudsa	bit.ly	Show Tweet
deborah_galea	twitter.com	Show Tweet
deborah_galea	sprou.tt	Show Tweet
CyberSecDN	msrc-blog.microsoft.com	Show Tweet
iototsecnews	iototsecnews.jp	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
RyanChauvinWork	twitter.com	Show Tweet
RyanChauvinWork	sprou.tt	Show Tweet
RyanChauvinWork	sprou.tt	Show Tweet
__kokumoto	theregister.com	Show Tweet

GitHub Search Results: Up to 10

Name	URL
No Data

GitHub Search Results: Up to 10

Name	URL
No Data

2022/06/15 Score : 1
Added Har-sia Database : 2022/05/10
Last Modified : 2022/06/15
Highest Scored Date : 2022/05/10
Highest Score : 55