← back
CVE-2025-1969mediumCWE-807

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
exploitation probability
0.3%top 75% of all CVEs
observed exploitation
nono source reports it
Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
AWS · Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
References
https://aws.amazon.com/security/security-bulletins/AWS-2025-004/https://github.com/aws-samples/iam-identity-center-team/releases/tag/v1.2.2https://github.com/aws-samples/iam-identity-center-team/security/advisories/GHSA-x9xv-r58p-qh86