CVE-2025-1969

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a user to modify a valid request and spoof an approval in TEAM.

Upgrade TEAM to the latest release v.1.2.2. Follow instructions in updating TEAM documentation for updating process

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-807

Affected software

No affected versions have been published.

Timeline

Published
Mar 4, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-19707.6The Export and Import Users and Customers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and incluCVE-2025-19717.2The Export and Import Users and Customers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2CVE-2025-19726.5The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validaCVE-2025-19734.9The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 vCVE-2025-19749.8A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network canCVE-2025-19757.5A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manCVE-2025-19766.7Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute CVE-2025-19777.7The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) that allows an authenCVE-2025-19789.8Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150,CVE-2025-19796.4Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is beiCVE-2025-19809.4The Ready_ application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconCVE-2025-19819.4Improper neutralization of input provided by a low-privileged user into a file search functionality in Ready_'s Invoices module allows for S
CVE-2025-1969: Medium severity, CVSS 4.3 | Vulnix