Get real-time updates on Telegram
Verified
osv:BIT-MINIO-2023-27589: minio (exact versions not specified)
Minio vulnerable to denial of access by an admin privileged user for root credential. Fixed version: 2023.03.13.
Affected technology
minio · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
A user with `consoleAdmin` permissions can potentially create a user that matches the root credential `accessKey`.
- Product
- minio
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-osv-bit-minio-2023-27589.html