CVE-2025-1969
Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Résumé
Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.
Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com