A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to
    modify their username and escalate privileges. (CVE-2022-2385)

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2583-1 advisory.

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to     modify their username and escalate privileges. (CVE-2022-2385)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
323251	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:2643-1)	Nessus	SuSE Local Security Checks	Local	critical
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Cloud Security	SCA Checks	Local	high
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
163646	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2022:2583-1)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2022-2385

high

Tenable Plugins

critical

high

high

high