Lucene search

B3DEECEB-27F5-5D9A-A91D-76CF3AD30517

HistoryMar 24, 2023 - 8:13 a.m.

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio

2023-03-2408:13:34

286

minio

information leakage

remote attack

http request

environment variables

sensitive information

exploit

fofa

python tool

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.92

Percentile

99.0%

JSON

CVE-2023-28432

MinIO存在信息泄露漏洞，未经身份认证的远程攻击者通过发送特殊HTTP请求即可获取所有环境变…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.92

Percentile

99.0%

JSON

Related for B3DEECEB-27F5-5D9A-A91D-76CF3AD30517