漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege Escalation
Vulnerability Description
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.79, he `ImportIam` admin API validates permissions using `ExportIAMAction` instead of `ImportIAMAction`, allowing a principal with export-only IAM permissions to perform import operations. Since importing IAM data performs privileged write actions (creating/updating users, groups, policies, and service accounts), this can lead to unauthorized IAM modification and privilege escalation. Version 1.0.0-alpha.79 fixes the issue.
CVSS Information
N/A
Vulnerability Type
授权机制不恰当
Vulnerability Title
rustfs 安全漏洞
Vulnerability Description
rustfs是RustFS开源的一个高性能对象存储系统。 rustfs 1.0.0-alpha.79之前版本存在安全漏洞，该漏洞源于使用ExportIAMAction而非ImportIAMAction验证权限，可能导致未经授权的IAM修改和权限提升。
CVSS Information
N/A
Vulnerability Type
N/A