Github.Com Hashicorp Terraform-Provider-Aws vulnerabilities

1 known vulnerability affecting github.com/hashicorp_terraform-provider-aws.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2018-9057CRITICAL≥ 0, < 1.14.02022-05-14

CVE-2018-9057 [CRITICAL] CWE-332 HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.