Skip to content
OpenAdvisories

Package · Alpine

minio

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2024-24747 Public exploit EPSS 34%

    MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

    MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for `s3:*` actions, but also `admin:*` actions. Which means unless somewhere above in the access-key hierarchy, the `admin`…

    minio minio github.com/minio/minio minio Alpine Go
  • Critical 9.3
    CVE-2020-11012

    Authentication bypass MinIO Admin API

    MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access keys - without know…

    minio minio minio Alpine