Lucene search

K
freebsdFreeBSD80FBE184-2358-11EF-996E-40B034455553
HistoryMay 28, 2024 - 12:00 a.m.

minio -- unintentional information disclosure

2024-05-2800:00:00
vuxml.freebsd.org
3
minio
security advisory
information disclosure
anonymous requests
object existence
server
bucket
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7

Confidence

Low

Minio security advisory GHSA-95fr-cm4m-q5p9 reports:

when used with anonymous requests by sending a random
object name requests you can figure out if the object
exists or not on the server on a specific bucket and also
gain access to some amount of information.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchminio< 2024.05.27.19.17.46UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

7

Confidence

Low

Related for 80FBE184-2358-11EF-996E-40B034455553