This vulnerability (CWE-862) affects the Amazon Athena ODBC driver prior to version 2.1.0.0. The issue arises from insufficient authentication security controls in the browser-based authentication components, potentially enabling threat actors to intercept or hijack authentication sessions. The CVSS 3.1 base score is 7.4, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity. The vendor advisory from AWS recommends upgrading to version 2.1.0.0 to address the issue.

Successful exploitation could allow an attacker to intercept or hijack authentication sessions, leading to unauthorized access to data or services accessed via the Amazon Athena ODBC driver. The confidentiality and integrity of authentication sessions are at risk. There is no indication of availability impact or known exploits in the wild at this time.

Users should upgrade the Amazon Athena ODBC driver to version 2.1.0.0 or later, as recommended by the AWS security advisory. Patch status is confirmed by the vendor advisory, indicating an official fix is available. No additional mitigation steps are specified or required beyond applying the update.