Timing Attack

github.com/minio/minio is vulnerable to signature verification timing attacks. The vulnerability leaks information on the secret key by using an non constant time comparison method when verifying signatures...

Sweet32 Attack

github.com/minio/minio is vulnerable to the Sweet32 cryptography attack. The library uses a Triple-DES cipher that is vulnerable to birthday attacks, allowing a malicious user to decrypt and obtain cleartext data faster than a standard brute-force attack...

Replay Attack

github.com/minio/minio is vulnerable to replay attacks. The attacks exist because it does not verify the date and time from the headers of HTTP requests...

Denial Of Service (DoS)

github.com/minio/minio is vulnerable to denial of service DoS attacks. The library does not have a limit to the amount of data that is read when sent from a client. This allows a malicious user to send copious amounts of data to the system to cause a denial of service attack...