CVE-2023-27589

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-27589
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-27589.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-27589
Aliases
Withdrawn
2024-05-08T06:52:37.122122Z
Published
2023-03-14T19:15:10Z
Modified
2024-05-08T06:59:06.699118Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
[none]
Details

Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with consoleAdmin permissions can potentially create a user that matches the root credential accessKey. Once this user is created successfully, the root credential ceases to work appropriately. The issue is patched in RELEASE.2023-03-13T19-46-17Z. There are ways to work around this via adding higher privileges to the disabled root user via mc admin policy set.

References

Affected packages

Git / github.com/minio/minio

Affected ranges

Type
GIT
Repo
https://github.com/minio/minio
Events
Introduced
8565cefe4eb945e2068a0431364166e42ecf2f50
Fixed
c7f7e67a100ce35af559e3f49a2ed0b67deaa919

Affected versions

RELEASE.*

RELEASE.2020-12-23T02-24-12Z
RELEASE.2020-12-26T01-35-54Z
RELEASE.2020-12-29T23-29-29Z
RELEASE.2021-01-05T05-22-38Z
RELEASE.2021-01-08T21-18-21Z
RELEASE.2021-01-16T02-19-44Z
RELEASE.2021-01-30T00-20-58Z
RELEASE.2021-02-01T22-56-52Z
RELEASE.2021-02-07T01-31-02Z
RELEASE.2021-02-11T08-23-43Z
RELEASE.2021-02-14T04-01-33Z
RELEASE.2021-02-19T04-38-02Z
RELEASE.2021-02-23T20-05-01Z
RELEASE.2021-02-24T18-44-45Z
RELEASE.2021-03-01T04-20-55Z
RELEASE.2021-03-04T00-53-13Z
RELEASE.2021-03-10T05-11-33Z
RELEASE.2021-03-12T00-00-47Z
RELEASE.2021-03-17T02-33-02Z
RELEASE.2021-03-26T00-00-41Z
RELEASE.2021-04-18T19-26-29Z
RELEASE.2021-04-22T15-44-28Z
RELEASE.2021-05-11T23-27-41Z
RELEASE.2021-05-16T05-32-34Z
RELEASE.2021-05-18T00-53-28Z
RELEASE.2021-05-20T22-31-44Z
RELEASE.2021-05-22T02-34-39Z
RELEASE.2021-05-26T00-22-46Z
RELEASE.2021-05-27T22-06-31Z
RELEASE.2021-06-07T21-40-51Z
RELEASE.2021-06-09T18-51-39Z
RELEASE.2021-06-14T01-29-23Z
RELEASE.2021-06-17T00-10-46Z
RELEASE.2021-07-08T01-15-01Z
RELEASE.2021-07-08T19-43-25Z
RELEASE.2021-07-12T02-44-53Z
RELEASE.2021-07-15T22-27-34Z
RELEASE.2021-07-21T22-15-23Z
RELEASE.2021-07-22T05-23-32Z
RELEASE.2021-07-27T02-40-15Z
RELEASE.2021-07-30T00-02-00Z
RELEASE.2021-08-05T22-01-19Z
RELEASE.2021-08-17T20-53-08Z
RELEASE.2021-08-20T18-32-01Z
RELEASE.2021-08-25T00-41-18Z
RELEASE.2021-08-31T05-46-54Z
RELEASE.2021-09-03T03-56-13Z
RELEASE.2021-09-09T21-37-07Z
RELEASE.2021-09-15T04-54-25Z
RELEASE.2021-09-18T18-09-59Z
RELEASE.2021-09-23T04-46-24Z
RELEASE.2021-09-24T00-24-24Z
RELEASE.2021-10-02T16-31-05Z
RELEASE.2021-10-06T23-36-31Z
RELEASE.2021-10-08T23-58-24Z
RELEASE.2021-10-10T16-53-30Z
RELEASE.2021-10-13T00-23-17Z
RELEASE.2021-10-23T03-28-24Z
RELEASE.2021-10-27T16-29-42Z
RELEASE.2021-11-03T03-36-36Z
RELEASE.2021-11-05T09-16-26Z
RELEASE.2021-11-09T03-21-45Z
RELEASE.2021-11-24T23-19-33Z
RELEASE.2021-12-09T06-19-41Z
RELEASE.2021-12-10T23-03-39Z
RELEASE.2021-12-18T04-42-33Z
RELEASE.2021-12-20T22-07-16Z
RELEASE.2021-12-27T07-23-18Z
RELEASE.2021-12-29T06-49-06Z
RELEASE.2022-01-03T18-22-58Z
RELEASE.2022-01-04T07-41-07Z
RELEASE.2022-01-07T01-53-23Z
RELEASE.2022-01-08T03-11-54Z
RELEASE.2022-01-25T19-56-04Z
RELEASE.2022-01-27T03-53-02Z
RELEASE.2022-01-28T02-28-16Z
RELEASE.2022-02-01T18-00-14Z
RELEASE.2022-02-05T04-40-59Z
RELEASE.2022-02-07T08-17-33Z
RELEASE.2022-02-12T00-51-25Z
RELEASE.2022-02-16T00-35-27Z
RELEASE.2022-02-17T23-22-26Z
RELEASE.2022-02-18T01-50-10Z
RELEASE.2022-02-24T22-12-01Z
RELEASE.2022-02-26T02-54-46Z
RELEASE.2022-03-03T21-21-16Z
RELEASE.2022-03-05T06-32-39Z
RELEASE.2022-03-08T22-28-51Z
RELEASE.2022-03-11T11-08-23Z
RELEASE.2022-03-11T23-57-45Z
RELEASE.2022-03-14T18-25-24Z
RELEASE.2022-03-17T02-57-36Z
RELEASE.2022-03-17T06-34-49Z
RELEASE.2022-03-22T02-05-10Z
RELEASE.2022-03-24T00-43-44Z
RELEASE.2022-03-26T06-49-28Z
RELEASE.2022-04-01T03-41-39Z
RELEASE.2022-04-08T19-44-35Z
RELEASE.2022-04-09T15-09-52Z
RELEASE.2022-04-12T06-55-35Z
RELEASE.2022-04-16T04-26-02Z
RELEASE.2022-04-26T01-20-24Z
RELEASE.2022-04-29T01-27-09Z
RELEASE.2022-04-30T22-23-53Z
RELEASE.2022-05-03T20-36-08Z
RELEASE.2022-05-04T07-45-27Z
RELEASE.2022-05-08T23-50-31Z
RELEASE.2022-05-19T18-20-59Z
RELEASE.2022-05-23T18-45-11Z
RELEASE.2022-05-26T05-48-41Z
RELEASE.2022-06-02T02-11-04Z
RELEASE.2022-06-02T16-16-26Z
RELEASE.2022-06-03T01-40-53Z
RELEASE.2022-06-06T23-14-52Z
RELEASE.2022-06-07T00-33-41Z
RELEASE.2022-06-10T16-59-15Z
RELEASE.2022-06-11T19-55-32Z
RELEASE.2022-06-17T02-00-35Z
RELEASE.2022-06-20T23-13-45Z
RELEASE.2022-06-25T15-50-16Z
RELEASE.2022-06-30T20-58-09Z
RELEASE.2022-07-04T21-02-54Z
RELEASE.2022-07-06T20-29-49Z
RELEASE.2022-07-08T00-05-23Z
RELEASE.2022-07-13T23-29-44Z
RELEASE.2022-07-15T03-44-22Z
RELEASE.2022-07-17T15-43-14Z
RELEASE.2022-07-24T01-54-52Z
RELEASE.2022-07-24T17-09-31Z
RELEASE.2022-07-26T00-53-03Z
RELEASE.2022-07-29T19-40-48Z
RELEASE.2022-07-30T05-21-40Z
RELEASE.2022-08-02T23-59-16Z
RELEASE.2022-08-05T23-27-09Z
RELEASE.2022-08-08T18-34-09Z
RELEASE.2022-08-11T04-37-28Z
RELEASE.2022-08-13T21-54-44Z
RELEASE.2022-08-22T23-53-06Z
RELEASE.2022-08-25T07-17-05Z
RELEASE.2022-08-26T19-53-15Z
RELEASE.2022-09-01T23-53-36Z
RELEASE.2022-09-07T22-25-02Z
RELEASE.2022-09-17T00-09-45Z
RELEASE.2022-09-22T18-57-27Z
RELEASE.2022-09-25T15-44-53Z
RELEASE.2022-10-02T19-29-29Z
RELEASE.2022-10-05T14-58-27Z
RELEASE.2022-10-08T20-11-00Z
RELEASE.2022-10-15T19-57-03Z
RELEASE.2022-10-20T00-55-09Z
RELEASE.2022-10-21T22-37-48Z
RELEASE.2022-10-24T18-35-07Z
RELEASE.2022-10-29T06-21-33Z
RELEASE.2022-11-08T05-27-07Z
RELEASE.2022-11-10T18-20-21Z
RELEASE.2022-11-11T03-44-20Z
RELEASE.2022-11-17T23-20-09Z
RELEASE.2022-11-26T22-43-32Z
RELEASE.2022-11-29T23-40-49Z
RELEASE.2022-12-02T19-19-22Z
RELEASE.2022-12-07T00-56-37Z
RELEASE.2022-12-12T19-27-27Z
RELEASE.2023-01-02T09-40-09Z
RELEASE.2023-01-06T18-11-18Z
RELEASE.2023-01-12T02-06-16Z
RELEASE.2023-01-18T04-36-38Z
RELEASE.2023-01-20T02-05-44Z
RELEASE.2023-01-25T00-19-54Z
RELEASE.2023-01-31T02-24-19Z
RELEASE.2023-02-09T05-16-53Z
RELEASE.2023-02-10T18-48-39Z
RELEASE.2023-02-17T17-52-43Z
RELEASE.2023-02-22T18-23-45Z
RELEASE.2023-02-27T18-10-45Z
RELEASE.2023-03-09T23-16-13Z