CVE-2022-2385 – AccessKeyID validation bypass

https://notcve.org/view.php?id=CVE-2022-2385

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges. Se ha detectado un problema de seguridad en aws-iam-authenticator donde una identidad IAM permitida puede ser capaz de modificar su nombre de usuario y escalar privilegios • https://github.com/kubernetes-sigs/aws-iam-authenticator/issues/472 https://groups.google.com/a/kubernetes.io/g/dev/c/EMxHpU-1ZYs • CWE-20: Improper Input Validation •