VDB
BDU%3A2021-03386
BDU%3A2021-03386
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость сервера хранения объектов MinIO, связанная с ошибками авторизации, позволяющая нарушителю обойти политику readOnly и оказать воздействие на целостность защищаемой информации
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM Corp., MinIO Inc | IBM Spectrum Protect Plus, MinIO |
Timeline
- Jul 6, 2021 CVE Published
References
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-redis-minio-golang-and-urllib3-affect-ibm-spectrum-protect-plus-container-backup-and-restore-for-kubernetes-and-openshift/ url
- https://github.com/minio/minio/commit/039f59b552319fcc2f83631bb421a7d4b82bc482 url
- https://github.com/minio/minio/pull/11682 url
- https://github.com/minio/minio/releases/tag/RELEASE.2021-03-04T00-53-13Z url
- https://github.com/minio/minio/security/advisories/GHSA-hq5j-6r98-9m8v url