Vulnerability GO-2024-2499
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
June 28, 2024 at 03:28 PM UTC
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio
<0.0.0-20240131185645-0ae4915a9391
<0.0.0-20240131185645-0ae4915a9391
Summary
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio
Details
Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation in github.com/minio/minio
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint in github.com/minio/minio
>=0.0.0 GO-2026-5757
>=0.0.0 GO-2026-5757
Unknown
3 months ago
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
Medium Risk
5 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
Impacted packages
Timeline
Published
2 years ago
June 28, 2024 at 03:28 PM UTC
Last Modified
2 hours ago
October 08, 2026 at 08:11 AM UTC