33 matches found
MinIO < RELEASE.2023-03-20T20-16-18Z Multiple Vulnerabilities
The version of MinIO installed on the remote host is prior to RELEASE.2023-03-20T20-16-18Z. It is, therefore, affected by multiple vulnerabilities: - When deployed in a cluster/in distributed mode MinIO returns all environment variables, including 'MINIOSECRETKEY' and 'MINIOROOTPASSWORD', resulti...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
Minio Environment Variables Exploit CVE-2023-28432 Overv...
VulnCheck KEV: CVE-2023-28432
MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
CVE-2023-28432 CVE-2023-28432 nuclei templates Dec Mini...
CVE-2023-28432
creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:12+00:00| seen| https://t.me/cibsecurity/60525 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-23 16:34:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4019 2023-03-24...
CVE-2023-28432
Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD, resulting in information disclosure. All users of...
CVE-2023-28432 Minio Information Disclosure in Cluster Deployment
Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD, resulting in information disclosure. All users of...
CVE-2023-28432
CVE-2023-28432 affects MinIO in cluster deployments from releases before RELEASE.2023-03-20T20-16-18Z, where MinIO may disclose all environment variables including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD. The issue is triggered by an information-disclosure flaw in the bootstrap/verify flow, enab...
MinIO Bootstrap Verify Information Disclosure
MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD, resulting in information disclosure. Verified...
CVE-2022-28432
The CVE-2022-28432 entry concerns Baby Care System v1.0 with a SQL injection vulnerability exploitable via /admin.php?id=siteoptions&social=display&value=0&sid=2. Public sources describe that the vulnerability arises from missing validation of external input in the SQL statement, enabling potenti...
CVE-2020-28432
creationtimestamp| type| source ---|---|--- 2021-02-23 18:35:07+00:00| published-proof-of-concept| https://t.me/cibsecurity/23988...
CVE-2020-28432
Multiple sources show conflicting status for CVE-2020-28432: Veracode reports that theme-core is vulnerable to command injection via lib/utils.js due to insecure use of exec with unsanitized values, implying a security issue; Snyk notes the CVE was retracted and not a security issue, with no fixe...
