Skip to content
Sign in
5.3 Medium

CVE-2025-0693 Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques…

Description

Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account.

Affected products and versions

Product Affected versions Fixed in
AWS Sign-in IAM Login Flow Versions not published
Track this CVE