CVE-2025-0693: AWS IAM User Enumeration

The post CVE-2025-0693: AWS IAM User Enumeration appeared first on Rhino Security Labs...

CVE-2025-0693

Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account...

CVE-2025-0693

creationtimestamp| type| source ---|---|--- 2025-01-23 21:27:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113879787711896884 2025-01-23 22:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvup7obk2h 2025-01-23 23:55:33+00:00| seen|...