Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2583-1

Опубликовано: 29 июл. 2022
Источник: suse-cvrf

Описание

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues:

  • CVE-2022-2385: Fixed AccessKeyID validation bypass (bsc#1201395).

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15
aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1
aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP2
aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3
aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
aws-iam-authenticator-0.5.3-150000.1.9.1
openSUSE Leap 15.3
aws-iam-authenticator-0.5.3-150000.1.9.1
openSUSE Leap 15.4
aws-iam-authenticator-0.5.3-150000.1.9.1

Ссылки

Описание

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP1:aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP2:aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3:aws-iam-authenticator-0.5.3-150000.1.9.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:aws-iam-authenticator-0.5.3-150000.1.9.1
Ссылки