Atlas Sql Jdbc Driver
Monthly
An open-redirect flaw (CWE-601) in the Atlas SQL JDBC Driver's authentication component lets a hostile or compromised endpoint steer the driver into handing an attacker-chosen URI to the operating system's default protocol handler during interactive sign-in. Only users who choose to connect the driver to an endpoint outside their trust boundary are exposed, and no confidentiality or availability impact is assessed - the outcome is a low-integrity effect from opening an arbitrary local address. No public exploit code or CISA KEV entry is associated with this issue at time of analysis, and it is rated a moderate, not high, priority (this_month) because exploitation hinges on user interaction and endpoint selection.
An open-redirect flaw (CWE-601) in the Atlas SQL JDBC Driver's authentication component lets a hostile or compromised endpoint steer the driver into handing an attacker-chosen URI to the operating system's default protocol handler during interactive sign-in. Only users who choose to connect the driver to an endpoint outside their trust boundary are exposed, and no confidentiality or availability impact is assessed - the outcome is a low-integrity effect from opening an arbitrary local address. No public exploit code or CISA KEV entry is associated with this issue at time of analysis, and it is rated a moderate, not high, priority (this_month) because exploitation hinges on user interaction and endpoint selection.