CVE-2022-30239

An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.

• CWE-88

• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://www.magnitude.com/products/data-connectivityProduct
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://insightsoftware.com/trust/security/advisories/redshift-and-athena-driver-vulnerability/Vendor Advisory
• https://www.magnitude.com/products/data-connectivityProduct

Published

May 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30233A CWE-20: Improper Input Validation vulnerability exists tha…6.5
• CVE-2022-30234A CWE-798: Use of Hard-coded Credentials vulnerability exist…9.8
• CVE-2022-30235A CWE-307: Improper Restriction of Excessive Authentication …9.8
• CVE-2022-30236A CWE-669: Incorrect Resource Transfer Between Spheres vulne…8.2
• CVE-2022-30237A CWE-311: Missing Encryption of Sensitive Data vulnerabilit…7.5
• CVE-2022-30238A CWE-287: Improper Authentication vulnerability exists that…8.8
• CVE-2022-3024The Simple Bitcoin Faucets WordPress plugin through 1.7.0 do…5.4
• CVE-2022-30240An argument injection vulnerability in the browser-based aut…7.8
• CVE-2022-30241The jquery.json-viewer library through 1.4.0 for Node.js doe…6.1
• CVE-2022-30242Honeywell Alerton Ascent Control Module (ACM) through 2022-0…6.8
• CVE-2022-30243Honeywell Alerton Visual Logic through 2022-05-04 allows una…8.8
• CVE-2022-30244Honeywell Alerton Ascent Control Module (ACM) through 2022-0…8