점검 대응긴급KEV 미등록
CVE-2026-35560
Amazon Amazon Athena ODBC driver, athena odbc, macos 취약점
Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to intercept authentication credentials due to insufficient default transport security when connecting to identity providers. This only applies to connections with external identity providers and does not apply to connections with Athena. To remediate this issue, users should upgrade to version 2.1.0.0.
- 대응 우선순위
- 점검
- CVSS
- 9.1
- EPSS
- 0.26% 백분위 17.8% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.04.04