The vulnerability of the MinIO object storage server, related to insecure management of privileges, allows an attacker to disable access to the root account’s credentials.

🗓️ 20 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

MinIO privilege management flaw lets an administrator create a user with root credentials to disable root access.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Pypa Setuptools, Golang Go, OpenSSH, Minio and Certifi may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift	26 Mar 202503:37	–	ibm
Circl	CVE-2023-27589	14 Mar 202321:23	–	circl
CNNVD	MinIO 安全漏洞	14 Mar 202300:00	–	cnnvd
CVE	CVE-2023-27589	14 Mar 202318:22	–	cve
Cvelist	CVE-2023-27589 Minio vulnerable to denial of access by an admin privileged user for root credential	14 Mar 202318:22	–	cvelist
EUVD	EUVD-2023-31331	3 Oct 202520:07	–	euvd
NVD	CVE-2023-27589	14 Mar 202319:15	–	nvd
OSV	BIT-MINIO-2023-27589 Minio vulnerable to denial of access by an admin privileged user for root credential	6 Mar 202410:56	–	osv
OSV	CVE-2023-27589 Minio vulnerable to denial of access by an admin privileged user for root credential	14 Mar 202318:22	–	osv
Prion	Design/Logic Flaw	14 Mar 202319:15	–	prion

Vulners

Node

minio minioRange<2023-03-13t19-46-17z

Source	Link
redos	www.redos.red-soft.ru/support/secure/
github	www.github.com/minio/minio/pull/16803
github	www.github.com/minio/minio/security/advisories/GHSA-9wfv-wmf7-6753
web	www.web.nvd.nist.gov/view/vuln/detail

20 Apr 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 27.7

EPSS0.00898

minio vulnerability privilege management administrator user root credentials disable root access