Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/02 2:51 p.m.12 views

SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control

Impact The filer registered the IAM gRPC service SeaweedIdentityAccessManagement with no authentication. Any client able to reach the filer gRPC port could invoke IAM RPCs — CreateUser, CreateAccessKey, PutUserPolicy, and related calls — to mint credentials and grant itself S3 administrative...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder