Tag
MinIO Information Disclosure Vulnerability
2 rules 1 TTPA remote, authenticated attacker can exploit a vulnerability in MinIO to disclose sensitive information.
MinIO Authentication Bypass Vulnerabilities
2 rules 2 TTPsAn anonymous remote attacker can exploit multiple vulnerabilities in MinIO to bypass authentication and manipulate data, potentially leading to unauthorized access and data breaches.
MinIO Unauthenticated Object Write Vulnerability
2 rules 3 TTPsTwo authentication bypass vulnerabilities in MinIO allow writing arbitrary objects to any bucket with only a valid access key, without the secret key or valid signature, impacting all MinIO deployments.
MinIO S3 Select CSV Parsing Denial of Service
2 rules 1 TTPMinIO's S3 Select feature is vulnerable to denial of service due to unbounded memory allocation when processing CSV files without newlines, leading to memory exhaustion and server crashes.
MinIO SSE Metadata Injection via Replication Headers Leads to Data Unreadability
2 rules 1 TTPA vulnerability in MinIO allows authenticated users with `s3:PutObject` permission to inject internal server-side encryption metadata into objects via crafted replication headers, leading to permanent data unreadability.