Lucene search
+L

943 matches found

Chainguard
Chainguard
•added 2024/05/29 6:37 p.m.•11 views

GHSA-95FR-CM4M-Q5P9 vulnerabilities

Vulnerabilities for packages: minio...

7.3AI score
SaveExploits0
Wolfi
Wolfi
•added 2024/05/29 6:37 p.m.•16 views

GHSA-95FR-CM4M-Q5P9 vulnerabilities

Vulnerabilities for packages: minio...

7.5AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/05/29 6:37 p.m.•51 views

MinIO information disclosure vulnerability

Impact If-Modified-Since If-Unmodified-Since Headers when used with anonymous requests by sending a random object name requests you can figure out if the object exists or not on the server on a specific bucket and also gain access to some amount of information such as Last-Modified of the latest...

5.3CVSS6.2AI score0.00629EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
•added 2024/05/29 9:49 a.m.•70 views

CVE-2024-36107

A sensitive information disclosure vulnerability was found in MinIO. Headers can be used to determine if an object exists or not on the server on a specific bucket and gain access to sensitive information. Mitigation Mitigation for this issue is either not available or the currently available...

5.3CVSS5.2AI score0.00629EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/05/29 12:00 a.m.•18 views

MinIO Information Disclosure Vulnerability (CNVD-2024-25257)

MinIO is a high-performance object storage service released under the GNU Affero General Public License v3.0. A security vulnerability exists in version MinIO RELEASE.2022-10-02T19-29-29Z, which stems from the disclosure of information about the presence of If-Modified-Since, If-Unmodified-Since...

5.3CVSS6.3AI score0.00629EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/28 7:15 p.m.•47 views

CVE-2024-36107

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.1AI score0.00629EPSS
SaveExploits0References5
Wolfi
Wolfi
•added 2024/05/28 7:15 p.m.•35 views

CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

5.3CVSS6AI score0.00629EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/05/28 7:15 p.m.•20 views

CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

5.3CVSS6AI score0.00629EPSS
SaveExploits0
OSV
OSV
•added 2024/05/28 6:50 p.m.•34 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/05/28 6:50 p.m.•38 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS6.6AI score0.00629EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/05/28 6:50 p.m.•68 views

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.1AI score0.00629EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•2 views

CVE-2024-36107: Exposure of Sensitive Information to an Unauthorized Actor

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

5.3CVSS5.8AI score0.00629EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/28 12:00 a.m.•15 views

PT-2024-5523 · Minio +2 · Minio +2

Name of the Vulnerable Software and Affected Versions: MinIO versions prior to RELEASE.2024-05-27T19-17-46Z Description: The issue concerns the use of If-Modified-Since and If-Unmodified-Since headers with anonymous requests, allowing an attacker to determine if an object exists on the server in ...

8.8CVSS7.1AI score0.83957EPSS
SaveExploits18References21
FreeBSD
FreeBSD
•added 2024/05/28 12:00 a.m.•25 views

minio -- unintentional information disclosure

Minio security advisory GHSA-95fr-cm4m-q5p9 reports: when used with anonymous requests by sending a random object name requests you can figure out if the object exists or not on the server on a specific bucket and also gain access to some amount of information...

5.3CVSS7AI score0.00629EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•15 views

MinIO 安全漏洞

MinIO is a high-performance object storage service released under the GNU Affero General Public License v3.0. A security vulnerability exists in version MinIO RELEASE.2022-10-02T19-29-29Z, which stems from the disclosure of information about the presence of If-Modified-Since, If-Unmodified-Since...

5.3CVSS6.4AI score0.00629EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2024/04/13 1:52 p.m.•134 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio

MinIO vulnerability exploit CVE-2023-28432 Description T...

7.5CVSS7.9AI score0.83957EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2024/04/13 1:52 p.m.•641 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio

MinIO vulnerability exploit CVE-2023-28432 Description T...

7.5CVSS7.9AI score0.83957EPSS
SaveExploits13
Packet Storm
Packet Storm
•added 2024/04/12 12:00 a.m.•421 views

MinIO Privilege Escalation

Exploit Title: MinIO 2024-01-31T20-20-33Z - Privilege Escalation Date: 2024-04-11 Exploit Author: Jenson Zhao Vendor Homepage: https://min.io/ Software Link: https://github.com/minio/minio/ Version: Up to excluding RELEASE.2024-01-31T20-20-33Z Tested on: Windows 10 CVE : CVE-2024-24747 Required...

8.8CVSS7.4AI score0.34086EPSS
SaveExploits4
zdt
zdt
•added 2024/04/12 12:00 a.m.•230 views

MinIO < 2024-01-31T20-20-33Z - Privilege Escalation Exploit

Exploit Title: MinIO 2024-01-31T20-20-33Z - Privilege Escalation Exploit Author: Jenson Zhao Vendor Homepage: https://min.io/ Software Link: https://github.com/minio/minio/ Version: Up to excluding RELEASE.2024-01-31T20-20-33Z Tested on: Windows 10 CVE : CVE-2024-24747 Required before execution:...

8.8CVSS8.7AI score0.34086EPSS
SaveExploits4
Exploit DB
Exploit DB
•added 2024/04/12 12:00 a.m.•294 views

MinIO < 2024-01-31T20-20-33Z - Privilege Escalation

Exploit Title: MinIO 2024-01-31T20-20-33Z - Privilege Escalation Date: 2024-04-11 Exploit Author: Jenson Zhao Vendor Homepage: https://min.io/ Software Link: https://github.com/minio/minio/ Version: Up to excluding RELEASE.2024-01-31T20-20-33Z Tested on: Windows 10 CVE : CVE-2024-24747 Required...

8.8CVSS7.8AI score0.34086EPSS
SaveExploits4
Rows per page
Query Builder