VulnerabilityhighExploited in the wild

Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers

The Hacker Newsby @TheHackersNewsSep 5, 2023 · 02:55 UTC (Sep 5, 2023)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2023-28432 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28432 CVE-2023-28434

Tags: cve-2023-28432 cve-2023-28434 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-28434 +1 related CVE CVE-2023-28432	Bucket Policy Bypass in MinIO Object Storage Lets Users Write to Any Bucket	8.8 group max	8%	KEVPoC	Mar 22, 2023 KEV Sep 19, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Sep 04, 2023 Vulnerability / Server Security An unknown threat actor has been observed weaponizing high-severity security flaws in the MinIO high-performance object storage system to achieve unauthorized code execution on affected servers. Cybersecurity and incident response firm Security Joes said the intrusion leveraged a publicly available exploit chain to backdoor the MinIO instance.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.