CVE-2021-41266 PoC — Minio 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41266.yaml

Associated Vulnerability

Title:Minio 访问控制错误漏洞 (CVE-2021-41266)
Description:Minio MinIO是美国MinIO（Minio）公司的一款开源的对象存储服务器。该产品支持构建用于机器学习、分析和应用程序数据工作负载的基础架构。 Minio 0.12.2及其之前版本存在访问控制错误漏洞，该漏洞源于软件启用外部IDP时，受影响的版本会在操作员控制台中遇到身份验证绕过问题。

Description

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled.

File Snapshot


 id: CVE-2021-41266

info:
  name: MinIO Operator Console Authentication Bypass
  author: alevsk
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!