CVE-2025-0693 — Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration
Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS acco…
Published: 2025-01-23 · CVSS: 6.9 · CVSS 4.0
Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7