CVE-2025-1969
Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Summary
Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Original description
The description as published by the source.
Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.
Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com