aws-iam-authenticator (SUSE:Linux Enterprise Module for Public Cloud 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Public Cloud 15 SP3 package aws-iam-authenticator, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-1996 — CVSS 9.1 (critical): Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
• CVE-2022-2385 — CVSS 8.1 (high): A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and…