CVE-2025-1969mediumCWE-807

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.3%

probabilidad de explotación

0.3%top 75% de las CVE

explotación observada

noninguna fuente lo reporta

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Productos afectados

AWS · Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Referencias

https://aws.amazon.com/security/security-bulletins/AWS-2025-004/https://github.com/aws-samples/iam-identity-center-team/releases/tag/v1.2.2 https://github.com/aws-samples/iam-identity-center-team/security/advisories/GHSA-x9xv-r58p-qh86