vulnerability

Alpine Linux: CVE-2020-11012: Authentication Bypass by Primary Weakness

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Apr 23, 2020

Added

Aug 22, 2024

Modified

Jun 18, 2026

Description

MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access keys - without knowing the admin secret key. This has been fixed and released in version RELEASE.2020-04-23T00-58-49Z.

Solution

alpine-linux-upgrade-minio

References

CVE-2020-11012
https://attackerkb.com/topics/CVE-2020-11012
https://security.alpinelinux.org/vuln/CVE-2020-11012
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-3402
CWE-305
CWE-755
EUVD-EUVD-2020-3402

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report