Description

In a cluster deployment, MinIO discloses all environment variables. A successful attack of this vulnerability may result in takeover of the server.

Remediation

Upgrade to the latest version of MinIO

References

Information Disclosure in Cluster Deployment

Related Vulnerabilities

WordPress Plugin JM Twitter Cards Information Disclosure (6.1)

Stack Trace Disclosure (RoR)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.4)

WordPress Plugin Wholesale Market for WooCommerce Arbitrary File Download (1.0.6)

WordPress Plugin Breadcrumb NavXT Information Disclosure (6.1.0)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure CWE-200 CVE-2023-28432