CVE-2026-35561 in Athena ODBC Driver
要約 (英語)
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows.
To remediate this issue, users should upgrade to version 2.1.0.0.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
責任者
AMZN
予約する
2026年04月03日
公開
2026年04月04日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 355190 | Amazon Athena ODBC Driver Browser-based Authentication 特権昇格 | 862 | 未定義 | 公式な修正 | CVE-2026-35561 |