Boletines de Vulnerabilidades

Issue with Temporary elevated access management (TEAM) - CVE-2025-1969

   
Software afectado AmazonWS
 
Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/03/04 10:30 AM PST Description Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. We recommend customers upgrade TEAM to the latest release, version 1.2.2. Affected versions: Resolution A fix has been released in version 1.2.2. Please refer to the "Update TEAM solution"

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2025-004/