Security Advisory
CVE-2025-0693
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account.