There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to
    modify their username and escalate privileges. (CVE-2022-2385)

リモートの SUSE Linux SLES15 / openSUSE 15 ホストには、SUSE-SU-2022:2583-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

  - aws-iam-authenticator でセキュリティ問題が発見されました。この問題では、許可リストにある IAM ID がユーザー名を変更し、権限を昇格できる可能性があります。(CVE-2022-2385)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2583-1 advisory.

  - A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to     modify their username and escalate privileges. (CVE-2022-2385)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
417619	SCA: security update for sigs.k8s.io/aws-iam-authenticator (GHSA-pp3f-98qg-5g75)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
163646	SUSE SLES15 / openSUSE 15 セキュリティ更新: aws-iam-authenticator (SUSE-SU-2022:2583-1)	Nessus	SuSE Local Security Checks	2022/7/30	2023/7/14	high
323251	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:2643-1)	Nessus	SuSE Local Security Checks	2026/6/27	2026/6/27	critical
163646	SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2022:2583-1)	Nessus	SuSE Local Security Checks	2022/7/30	2023/7/14	high

偵測

搜尋 Plugin

high

high

high

critical

high