CVE-2025-1969

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-1969

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1969.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-1969

Aliases

GHSA-x9xv-r58p-qh86

Published

2025-03-04T18:49:01Z

Modified

2026-10-21T02:52:12Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

Details

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.

Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

Database specific

{
    "cna_assigner":  "AMZN",
    "cwe_ids":  [
        "CWE-807"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1969.json"
}

References

Affected packages

Git / github.com/aws-samples/iam-identity-center-team

Affected ranges

Type

GIT

Repo

https://github.com/aws-samples/iam-identity-center-team

Events

Introduced

Fixed

085f76577dfba4739d6d8ea7d23150b52664e4c8

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.2.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "original_tag":  "v1.2.2",
            "range":  [
                {
                    "fixed":  "085f76577dfba4739d6d8ea7d23150b52664e4c8"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

v.*

v.1.2.0

v1.*

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.0.6

v1.1.0

v1.1.1

v1.1.2

v1.2.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1969.json"