- Vendor / Project
- MinIO
- Product
- MinIO
- Date added
- Apr 21, 2023
- Due date
- May 12, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-200
Description
MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.
Required action
Apply updates per vendor instructions.