Evil_MinIO exploit used in attacks on MinIO Storage Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-28434+1 related CVE | Bucket Policy Bypass in MinIO Object Storage Lets Users Write to Any Bucket | 8.8 group max | 8% | KEVPoC | KEV |
From the original article
3 min read at securityaffairs.com
A threat actor was spotted exploiting MinIO storage system vulnerabilities to execute arbitrary code on affected servers. Security Joes researchers have observed an unknown threat actor using a publicly available exploit chain for vulnerabilities in the MinIO Object Storage system to achieve arbitrary code execution on vulnerable servers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.