943 matches found
Improper Privilege Management
MinIO is vulnerable to Improper Privilege Management. The vulnerability is caused due to an improper access control checks where the access key hierarchy in MinIO allows the creation of access keys that inherit permissions from the parent key, enabling the override of s3 permissions, including...
The vulnerability of MinIO object storage servers, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the MinIO object storage server is related to deficiencies in access control based on the UpdateServiceAccountAdminAction policy. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...
Improper Privilege Management
minio is vulnerable to Improper Privilege Management.The vulnerability is due to access keys inheriting permissions from parent keys, including admin rights, allowing them to override their own permissions...
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
Summary When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able to simply override their own s3...
GHSA-XX8W-MQ23-29G4 Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
Summary When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able to simply override their own s3...
CVE-2024-24747
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
Code injection
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
CVE-2024-24747 MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
CVE-2024-24747 MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
CVE-2024-24747
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
CVE-2024-24747 MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
CVE-2024-24747
CVE-2024-24747 (MinIO) : MinIO allows new access keys to inherit the parent’s permissions, including admin:*, enabling potential privilege escalation by overriding their own s3 permissions. The issue is mitigated in the release RELEASE.2024-01-31T20-20-33Z. Connected docs also describe related ad...
minio -- privilege escalation via permissions inheritance
Minio security advisory GHSA-xx8w-mq23-29g4 ports: When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be...
MinIO 安全漏洞
MinIO is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics, and application data workloads. MinIO has a security vulnerability. An attacker can gain higher privileges by exploiting the vulnerability...
CVE-2024-24747: Improper Privilege Management
MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able t...
PT-2024-1573
Name of the Vulnerable Software and Affected Versions MinIO versions prior to RELEASE.2024-01-31T20-20-33Z Description The issue is related to the inheritance of permissions by access keys in MinIO, a high-performance object storage system. When an access key is created, it inherits the permissio...
MinIO Console Detection
Binary data minioconsoledetect.nbin...
MinIO Information Disclosure (CVE-2023-28432)
Binary data minioCVE-2023-28432.nbin...
VulnCheck KEV: CVE-2021-41266
Minio console is a graphical user interface for the for MinIO operator. Minio itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. All users on release v0.12.2 and before are affect...
