Vulnerabilitycritical

Microsoft fixed RCE in driver used by Azure Synapse and Data Factory

Security Affairsby @securityaffairsMay 10, 2022 · 14:29 UTC (May 10, 2022)2 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-29972 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-29972

Tags: cve-2022-29972 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-29972	An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through…	7.8	4%		May 9, 2022

From the original article

2 min read at securityaffairs.com

Microsoft disclosed a now-fixed vulnerability in Azure Synapse and Azure Data Factory that could have allowed remote code execution. Microsoft announced to have addressed a critical remote code execution flaw, tracked as CVE-2022-29972 and named SynLapse , affecting Azure Synapse and Azure Data Factory.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.