Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/02/01 7:21 p.m.39 views

Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

Summary When someone creates an access key, it inherits the permissions of the parent key. Not only for s3: actions, but also admin: actions. Which means unless somewhere above in the access-key hierarchy, the admin rights are denied, access keys will be able to simply override their own s3...

8.8CVSS8.9AI score0.34086EPSS
SaveExploits4References5Affected Software1
Rows per page
Query Builder