hashicorp/terraform-provider-aws

hashicorp/terraform-provider-aws

GitHubGitHub
GitHubgithub.com
registry.terraform.ioregistry.terraform.io
Releases505
Frequency6 days 12 hours
Last Release
Stars11K
The AWS Provider enables Terraform to manage AWS resources.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-9057↗
—5 MEDIUM

aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.