CVE-2025-1969

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

Score

CVSS 4.0 5.3 Medium

Status

Deferred - ff89ba41-3aa1-4d27-914a-91399e9639e5

Published

2025-03-04

Last modified

2025-10-14

Weaknesses

CWE-807

Affected products

• Temporary Elevated Access Management Team For Aws Iam Identity Center (Aws)

References

• https://aws.amazon.com/security/security-bulletins/AWS-2025-004/
• https://github.com/aws-samples/iam-identity-center-team/releases/tag/v1.2.2
• https://github.com/aws-samples/iam-identity-center-team/security/advisories/GHSA-x9xv-r58p-qh86