CVE-2022-2385: AccessKeyID validation bypass
Vulnerability summary
CVE-2022-2385 is a high (CVSS 8.8) Improper Input Validation vulnerability in kubernetes aws-iam-authenticator. EPSS estimates a 1.10% chance of exploitation in the next 30 days, higher than 65.7% of scored vulnerabilities.
Not severe (CVSS 8.1, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 12-07-2022PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges.
CVSS metrics
4 scores · 3 sources · 2 versions- CVE.orgCNA8.1HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NDiffers
- OSV · GoEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NDiffers
EPSS trend
Probability
1.10%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.10% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse5 products
- aws-iam-authenticator&distro=SUSE Linux Enterprise Module for Public Cloud 15< 0.5.3-150000.1.9.1
- aws-iam-authenticator&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP1< 0.5.3-150000.1.9.1
- aws-iam-authenticator&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP2< 0.5.3-150000.1.9.1
- aws-iam-authenticator&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP3< 0.5.3-150000.1.9.1
- aws-iam-authenticator&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4< 0.5.3-150000.1.9.1
Opensuse2 products
- aws-iam-authenticator&distro=openSUSE Leap 15.3< 0.5.3-150000.1.9.1
- aws-iam-authenticator&distro=openSUSE Leap 15.4< 0.5.3-150000.1.9.1
Kubernetes1 product
- aws-iam-authenticator≥ v0.5.2, < unspecified | ≥ unspecified, < v0.5.9 | ≥ 0.5.2, < 0.5.9
Sigs.k8s.io1 product
- aws-iam-authenticator< 0.5.9
4 vendors · 9 products
References
11 links- github.com/kubernetes-sigs/aws-iam-authenticator/issues/472X Refsource MISCWEBIssue TrackingThird Party Advisory
- groups.google.com/a/kubernetes.io/g/dev/c/EMxHpU-1ZYsX Refsource MISCWEBIssue TrackingMailing ListThird Party Advisory
