跳转到帖子

MinIO Bootstrap Verify Information Disclosure

recommended_posts

发布于
  • Members

MinIO Bootstrap Verify Information Disclosure

Disclosed
03/20/2023
Created
03/11/2024

Description

MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. Verified against MinIO 2023-02-27T18:10:45Z

Author(s)

  • joel <joel @ ndepthsecurity>
  • RicterZ

Development

  • Source Code
  • History
  • 查看数 698
  • 已创建
  • 最后回复