Approved changes feed: RSS · Atom

cpe:2.3:a:aws:aws_sign-in_iam_login_flow:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAws (e6707f00-6abb-51df-808c-9e3417305027)
ProductAws Sign In Iam Login Flow (ef6a8af7-9993-5b47-b3ae-b531318bbe30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0693 vulnerable 2026-06-03 14:58:32.669703 Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration
MEDIUM (5.3)
Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account.
Published: 2025-01-23T21:22:25.699Z
Updated: 2025-10-14T18:42:46.835Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.