GO-2022-0261 Authentication bypass issue in the Operator Console in github.com/minio/console

Authentication bypass issue in the Operator Console in github.com/minio/console...

The vulnerability of the MinIO object storage server, related to the exposure of confidential information to unauthorized individuals, allows attackers to disclose confidential information.

The vulnerability of the MinIO object storage server lies in the use of headers to determine whether an object exists on the server at a given time. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

ROS-20240807-05

A vulnerability in the PostPolicyBucket component of the MinIO object storage server is related to errors in privilege management. privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by sending specially crafted HTTP...

GHSA-XR7Q-JX4M-X55M vulnerabilities

Vulnerabilities for packages: trivy, spire-server, temporal, conftest, dagger, vcluster, opentelemetry-collector-contrib, kwok, terraform-provider-google, ksops, spicedb, tflint, kargo, restic, fulcio, kubernetes-csi-external-provisioner, k3s, certificate-transparency, grpc-health-probe, rqlite,...

GHSA-XR7Q-JX4M-X55M vulnerabilities

Vulnerabilities for packages: terraform-provider-google, kargo, spire-server, cloud-sql-proxy-fips, spicedb, temporal, minio-fips, cert-manager-cmctl, smarter-device-manager-fips, smarter-device-manager, conftest-fips, dex-fips, rqlite, conftest, kwok, cilium, cloudnative-pg-fips, tempo,...

GO-2024-2499 Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio

Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation in github.com/minio/minio...

GO-2024-2886 MinIO information disclosure vulnerability in github.com/minio/minio

MinIO information disclosure vulnerability in github.com/minio/minio...

BIT-MINIO-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

Sensitive Information Disclosure

github.com/minio/minio/ is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the ability to infer the existence of objects on a server by sending anonymous requests with random object names...

GHSA-95FR-CM4M-Q5P9 MinIO information disclosure vulnerability

Impact If-Modified-Since If-Unmodified-Since Headers when used with anonymous requests by sending a random object name requests you can figure out if the object exists or not on the server on a specific bucket and also gain access to some amount of information such as Last-Modified of the latest...

GHSA-95FR-CM4M-Q5P9 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-95FR-CM4M-Q5P9 vulnerabilities

Vulnerabilities for packages: minio...

MinIO information disclosure vulnerability

Impact If-Modified-Since If-Unmodified-Since Headers when used with anonymous requests by sending a random object name requests you can figure out if the object exists or not on the server on a specific bucket and also gain access to some amount of information such as Last-Modified of the latest...

CVE-2024-36107

A sensitive information disclosure vulnerability was found in MinIO. Headers can be used to determine if an object exists or not on the server on a specific bucket and gain access to sensitive information. Mitigation Mitigation for this issue is either not available or the currently available...

MinIO Information Disclosure Vulnerability (CNVD-2024-25257)

MinIO is a high-performance object storage service released under the GNU Affero General Public License v3.0. A security vulnerability exists in version MinIO RELEASE.2022-10-02T19-29-29Z, which stems from the disclosure of information about the presence of If-Modified-Since, If-Unmodified-Since...

CVE-2024-36107

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...