CVE-2020-11012: minio — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2020-11012

CVSS 7.5 · High EPSS 1,9%

Kerentanan Authentication Bypass by Primary Weakness pada minio. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access keys - without knowing the admin secret key. This has been fixed and released in version RELEASE.2020-04-23T00-58-49Z.

Rincian

Terbit di NVD: 23 April 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-305: Authentication Bypass by Primary Weakness
CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari): 1,9% peluang dieksploitasi; lebih tinggi dari 78,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
minio	minio	Semua versi sebelum 2020-04-23t00-58-49z

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/minio/minio/commit/4cd6ca02c7957aeb2de3eede08b0754332a77923 patch · advisory pihak ketiga
https://github.com/minio/minio/security/advisories/GHSA-xv4r-vccv-mg4w patch · advisory pihak ketiga
https://github.com/minio/minio/pull/9422 advisory pihak ketiga
https://github.com/minio/minio/releases/tag/RELEASE.2020-04-23T00-58-49Z advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.