CVE-2026-35561 in Athena ODBC Driver
Сводка (Английский)
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows.
To remediate this issue, users should upgrade to version 2.1.0.0.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Ответственный
AMZN
Резервировать
03.04.2026
Раскрытие
04.04.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 355190 | Amazon Athena ODBC Driver Browser-based Authentication эскалация привилегий | 862 | Не определено | Официальное исправление | CVE-2026-35561 |