CVE-2018-9057

aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.

• CWE-332

• https://github.com/terraform-providers/terraform-provider-aws/pull/3934Issue Tracking, Patch, Third Party Advisory
• https://github.com/terraform-providers/terraform-provider-aws/pull/3934Issue Tracking, Patch, Third Party Advisory

Published

Mar 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-9051In Windows Master (aka Windows Optimization Master) 7.99.13.…
• CVE-2018-9052In Windows Master (aka Windows Optimization Master) 7.99.13.…
• CVE-2018-9053In Windows Master (aka Windows Optimization Master) 7.99.13.…
• CVE-2018-9054In Windows Master (aka Windows Optimization Master) 7.99.13.…
• CVE-2018-9055JasPer 2.0.14 allows denial of service via a reachable asser…
• CVE-2018-9056Systems with microprocessors utilizing speculative execution…
• CVE-2018-9058In Long Range Zip (aka lrzip) 0.631, there is an infinite lo…
• CVE-2018-9059Stack-based buffer overflow in Easy File Sharing (EFS) Web S…
• CVE-2018-9060Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-9062In some Lenovo ThinkPad products, one BIOS region is not pro…6.8
• CVE-2018-9063MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In…
• CVE-2018-9064In Lenovo xClarity Administrator versions earlier than 2.1.0…