CVE-2022-29971

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena ODBC Driver 1.1.1 through 1.1.x before 1.1.17 may allow a local user to execute arbitrary code.

• CWE-88

• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://www.magnitude.com/products/data-connectivityProduct
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://www.magnitude.com/products/data-connectivityProduct

Published

May 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29965The Emerson DeltaV Distributed Control System (DCS) controll…5.5
• CVE-2022-29967static_compressed_inmemory_website_callback.c in Glewlwyd th…7.5
• CVE-2022-29968An issue was discovered in the Linux kernel through 5.17.5. …7.8
• CVE-2022-29969The RSS extension before 2022-04-29 for MediaWiki allows XSS…6.1
• CVE-2022-2997Session Fixation in GitHub repository snipe/snipe-it prior t…8
• CVE-2022-29970Sinatra before 2.2.0 does not validate that the expanded pat…7.5
• CVE-2022-29972An argument injection vulnerability in the browser-based aut…7.8
• CVE-2022-29973relan exFAT 1.3.0 allows local users to obtain sensitive inf…4.7
• CVE-2022-29974AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in la…4.3
• CVE-2022-29975An Authenticated Reflected Cross-site scripting at CC Parame…5.4
• CVE-2022-29976An Authenticated Reflected Cross-site scripting at BCC Param…5.4
• CVE-2022-29977There is an assertion failure error in stbi__jpeg_huff_decod…6.5