CVE-2022-29972

—

CVSS 3.1

7.8 high

EPSS

4%p89

Published

May 9, 2022 (May 9, 2022)

Modified

Jun 17, 2026

Description

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through 1.4.21.1001 and 1.4.22 through 1.4.x before 1.4.52) may allow a local user to execute arbitrary code.

Vendors: insightsoftware
Products: magnitude simba amazon redshift odbc driver
Weakness: CWE-88
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news10 stories

Microsoft fixes Follina and 55 other CVEs

Help Net SecurityJul 12, 17:26 UTC · Jul 12, 2022Vulnerability CVE-2022-30190 CVE-2022-30136 CVE-2022-30163+3 CVEs

60

Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft Azure

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022Vulnerability CVE-2022-29972

60

Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs

Help Net SecurityMay 15, 00:00 UTC · May 15, 2022Vulnerability in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs

60

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Help Net SecurityMay 12, 08:27 UTC · May 12, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs1

60

Microsoft Releases Fix for New Zero

The Hacker NewsMay 11, 16:06 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+14 CVEs

60

Microsoft Fixes Three Zero

Infosecurity MagazineMay 11, 09:00 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs

60

Microsoft Patch Tuesday updates for May 2022 fixes 3 zero

Security AffairsMay 11, 06:11 UTC · May 11, 2022Vulnerability in the wildCVE-2022-26925 CVE-2022-22713 CVE-2022-29972+1 CVEs

60

Microsoft Patch Tuesday for May 2022 — Snort rules and prominent vulnerabilities

Cisco TalosMay 10, 19:31 UTC · May 10, 2022Vulnerability CVE-2022-21972 CVE-2022-23270 CVE-2022-26931+9 CVEs1

60

Microsoft fixed RCE in driver used by Azure Synapse and Data Factory

Security AffairsMay 10, 14:29 UTC · May 10, 2022Vulnerability CVE-2022-29972

60

Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory

The Hacker NewsMay 10, 09:48 UTC · May 10, 2022Vulnerability CVE-2022-29972

47