本文へ移動
English version →
中 5.9

Unverified ownership of the default Athena query result location in AWS SDK for pandas

CVE-2026-118029 SecPulse初出

概要

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. 

To remediate this issue, users s...

影響パッケージ

種類パッケージ影響を受ける版直った版
aws aws-sdk-pandas
3.16.1 未満
3.16.1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. 

To remediate this issue, users should upgrade to version 3.16.1 or later. Users should also verify that the default Athena result bucket in each account and region is owned by their own account, and set an explicit result location or enforce a workgroup result configuration.

出典: CVE.org (CVE Program・cvelistV5) NVD

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく