CVE-2022-2385

Description

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

Affected Platforms

Weakness Type

CWE-20, NVD-CWE-noinfo

References

• https://github.com/kubernetes-sigs/aws-iam-authenticator/issues/472
• https://groups.google.com/a/kubernetes.io/g/dev/c/EMxHpU-1ZYs
• https://github.com/kubernetes-sigs/aws-iam-authenticator/issues/472
• https://groups.google.com/a/kubernetes.io/g/dev/c/EMxHpU-1ZYs