CVE-2026-107783
Description
A flaw was found in AWS Tools for PowerShell. Due to improper logging, sensitive credential details are recorded into command output and log files. A local user can exploit this vulnerability to recover cleartext AWS Identity and Access Management (IAM) console passwords from log artifacts, leading to information disclosure and potential unauthorized account access.
Statement
This vulnerability is rated as Moderate because exploitation requires local access to inspect terminal history or generated log artifacts, limiting the threat vector to existing local users rather than remote attackers. Furthermore, AWS Tools for PowerShell is not packaged or distributed in Red Hat Enterprise Linux or other Red Hat products. Any potential impact is restricted to third-party installations where unauthorized local users can access administrative command outputs.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Files or Directories
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
