CVE

CVE-2023-28432

MinIO Information Disclosure Vulnerability

MinIO · MinIO

Date added (CISA)

2023-04-21

Remediation due

2023-05-12

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.