CVE-2025-1969

Medium

Description

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM. Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

SeverityMedium

CVSS4.3

Exploit probability—

ProductTemporary Elevated Access Management (TEAM) for AWS IAM Identity Center

PublishedMar 4, 2025

First seenMar 4, 2025

Weakness typeCWE-807CWE-807

How to fix

Update

AWS Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center1.2.2 or later

Patches

github.com/aws-samples/iam-identity-center-team/releases/tag/v1.2.2

Vendor advisories

aws.amazon.com/security/security-bulletins/AWS-2025-004/

Affected products

Product	Affected versions	Fixed in
AWS Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center	v < 1.2.2	1.2.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.