CyberRota Analysis
AI-GeneratedThe vulnerability arises from incorrect privilege assignments in the Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center, allowing authenticated remote users with application-level access to manipulate access requests, potentially granting them unauthorized temporary elevated access to AWS accounts. Organizations using this solution should prioritize upgrading to version 1.5.1 or later to mitigate the risk of unauthorized access and ensure the security of their AWS environments. Immediate action is essential for any users relying on TEAM to manage access controls effectively.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended temporary elevated access to the AWS accounts accessed using the TEAM deployment. This issue has been addressed in TEAM version 1.5.1 or later. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.