CVE-2025-1969

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1969
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1969.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-1969
Aliases
  • GHSA-x9xv-r58p-qh86
Published
2025-03-04T18:49:01.823Z
Modified
2026-07-08T06:51:52.993682289Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Details

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.

Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1969.json",
    "cwe_ids": [
        "CWE-807"
    ],
    "cna_assigner": "AMZN"
}
References

Affected packages

Git / github.com/aws-samples/iam-identity-center-team

Affected ranges

Type
GIT
Repo
https://github.com/aws-samples/iam-identity-center-team
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
085f76577dfba4739d6d8ea7d23150b52664e4c8
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.2.2"
        }
    ]
}

Affected versions

v.*
v.1.2.0
v1.*
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.1.0
v1.1.1
v1.1.2
v1.2.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1969.json"