The vulnerability of the endpoint AssumeRoleWithLDAPIdentity of the STS (Security Token Service) server for MinIO object storage allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the endpoint of the STS Security Token Service, which manages MinIO object storage, is related to inconsistencies in response to incoming requests. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...