module

MinIO Bootstrap Verify Information Disclosure

Try Surface Command
Back to search
Disclosed
Mar 20, 2023
Created
Mar 11, 2024

Description

MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with
RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns
all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`,
resulting in information disclosure.

Verified against MinIO 2023-02-27T18:10:45Z

Authors

joel joel @ ndepthsecurity
RicterZ

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use auxiliary/gather/minio_bootstrap_verify_info_disc
    msf auxiliary(minio_bootstrap_verify_info_disc) > show actions
        ...actions...
    msf auxiliary(minio_bootstrap_verify_info_disc) > set ACTION < action-name >
    msf auxiliary(minio_bootstrap_verify_info_disc) > show options
        ...show and set options...
    msf auxiliary(minio_bootstrap_verify_info_disc) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today