CVE-2025-1969mediumCWE-807

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%

probabilidade de exploração

0.3%top 75% das CVEs

exploração observada

nãonenhuma fonte reporta

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

AWS · Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Referências

https://aws.amazon.com/security/security-bulletins/AWS-2025-004/https://github.com/aws-samples/iam-identity-center-team/releases/tag/v1.2.2 https://github.com/aws-samples/iam-identity-center-team/security/advisories/GHSA-x9xv-r58p-qh86