There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to
    modify their username and escalate privileges. (CVE-2022-2385)

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2583-1 advisory.

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to     modify their username and escalate privileges. (CVE-2022-2385)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	high
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	high
323251	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:2643-1)	Nessus	SuSE Local Security Checks	6/27/2026	6/27/2026	critical
163646	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2022:2583-1)	Nessus	SuSE Local Security Checks	7/30/2022	7/14/2023	high

Detections

Analytics

Plugins Search

high

high

critical

high