[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6WjMBt63NCKTS7wrkViw940DUqTUFtjXoIwNPPDN65g":3,"g5a-risk:CVE-2018-9057":107},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":58,"weaknessesCount":49,"isActivelyExploited":67,"cisaInfo":15,"otxData":15,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":103,"notableEvents":104},"CVE-2018-9057","What is CVE-2018-9057?","aws\u002Fresource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.","aws\u002Fresource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm ...","2018-03-27T18:29:00.307","2018-04-24T12:08:57.183",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01915,[40,40,40,40,40,40,40],"Critical",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"hashicorp","terraform","*","cpe:2.3:a:hashicorp:terraform:*:*:*:*:*:aws:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Fterraform-providers\u002Fterraform-provider-aws\u002Fpull\u002F3934","GitHub",[55,56,57],"Issue Tracking","Patch","Third Party Advisory",[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-332","Insufficient Entropy in PRNG","The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.","","Draft","Variant","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2018-9057? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-9057, a critical severity cyber security vulnerability from 2018. aws\u002Fresource_aws_iam_user_login_profile.go in the HashiC...","CVE-2018-9057, CVE-2018-9057 vulnerability, CVE-2018-9057 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, hashicorp security, terraform vulnerability","\u002Fwhat-is\u002Fcve-2018-9057",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-9057","Cybersecurity","CVE-2018-9057, CVE-2018-9057 vulnerability, CVE-2018-9057 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":15,"Negate":15,"Nodes":96},[97],{"Operator":98,"Negate":15,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":101,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":102},"1182C7C6-7D8C-4F8B-97B3-8FD0F5A9C8E0","1.12.0",[],[],{"lastModified":11,"cacheTime":106,"version":33},1792439711519,{"score":108,"band":109,"action":110,"scoredAt":111},55,"Medium","Plan remediation","2026-10-19T06:56:15.676732+00:00"]