CVE-2025-1969CWE-807

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Medium · published March 4, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.

Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00334 · 25.5th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2025-03-04T18:49Z
EPSS history
Timeline
  • 04 MAR 18:49Z
    Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
    cvelistv5