CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-03-22
MinIO Distributed Deployment Information Disclosure and Credential Leakage Vulnerability (CVE-2023-28432) Analysis and Mitigation Guide
[Affected Scope] MinIO distributed (cluster) deployments starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z
[Impact] Unauthenticated remote attackers can retrieve all system environment variables, including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD, leading to complete compromise of the storage cluster
[Mitigation] Immediately upgrade MinIO to RELEASE.2023-03-20T20-16-18Z or later, and rotate all potentially exposed root credentials immediately