Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-2385

AccessKeyID validation bypass

Description

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes aws-iam-authenticator

  • v0.5.2 to < unspecifiedaffected
  • unspecified to < v0.5.9affected

References