CVE-2024-32888

{"id": "CVE-2024-32888", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}]}, "published": "2024-05-15T03:15:12.627", "references": [{"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/0d354a5f26ca23f7cac4e800e3b8734220230319", "source": "security-advisories@github.com"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/12a5e8ecfbb44c8154fc66041cca2e20ecd7b339", "source": "security-advisories@github.com"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/bc93694201a291493778ce5369a72befeca5ba7d", "source": "security-advisories@github.com"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-x3wm-hffr-chwm", "source": "security-advisories@github.com"}, {"url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56", "source": "security-advisories@github.com"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/0d354a5f26ca23f7cac4e800e3b8734220230319", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/12a5e8ecfbb44c8154fc66041cca2e20ecd7b339", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/commit/bc93694201a291493778ce5369a72befeca5ba7d", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-x3wm-hffr-chwm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces (APIs) available in the Java Platform, Enterprise Editions. Prior to version 2.1.0.28, SQL injection is possible when using the non-default connection property `preferQueryMode=simple` in combination with application code which has a vulnerable SQL that negates a parameter value. There is no vulnerability in the driver when using the default, extended query mode. Note that `preferQueryMode` is not a supported parameter in Redshift JDBC driver, and is inherited code from Postgres JDBC driver. Users who do not override default settings to utilize this unsupported query mode are not affected. This issue is patched in driver version 2.1.0.28. As a workaround, do not use the connection property `preferQueryMode=simple`. (NOTE: Those who do not explicitly specify a query mode use the default of extended query mode and are not affected by this issue.)"}, {"lang": "es", "value": "El controlador Amazon JDBC para Redshift es un controlador JDBC de tipo 4 que proporciona conectividad de bases de datos a trav\u00e9s de las interfaces de programas de aplicaci\u00f3n (API) JDBC est\u00e1ndar disponibles en Java Platform, Enterprise Editions. Antes de la versi\u00f3n 2.1.0.28, la inyecci\u00f3n SQL es posible cuando se usa la propiedad de conexi\u00f3n no predeterminada `preferQueryMode=simple` en combinaci\u00f3n con c\u00f3digo de aplicaci\u00f3n que tiene un SQL vulnerable que niega el valor de un par\u00e1metro. No hay vulnerabilidad en el controlador cuando se utiliza el modo de consulta extendido predeterminado. Tenga en cuenta que `preferQueryMode` no es un par\u00e1metro admitido en el controlador JDBC de Redshift y es un c\u00f3digo heredado del controlador JDBC de Postgres. Los usuarios que no anulen la configuraci\u00f3n predeterminada para utilizar este modo de consulta no compatible no se ver\u00e1n afectados. Este problema se solucion\u00f3 en la versi\u00f3n del controlador 2.1.0.28. Como workaround, no utilice la propiedad de conexi\u00f3n `preferQueryMode=simple`. (NOTA: Aquellos que no especifican expl\u00edcitamente un modo de consulta utilizan el modo de consulta extendido predeterminado y no se ven afectados por este problema)."}], "lastModified": "2025-06-12T16:15:21.867", "sourceIdentifier": "security-advisories@github.com"}