CVE-2026-119084 | BDVDB-2026-399608 Detail
AWSamazon-redshift-jdbc-driver
Description#
Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later.
Impact#
CAPEC-138 Reflection Injection
Weaknesses#
- CWE-470 Use of Externally-Controlled input to select classes or code ('unsafe reflection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.