ALPINE-CVE-2020-11012

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2020-11012
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2020-11012
Upstream
Published
2020-04-23T22:15:12Z
Modified
2026-11-03T06:32:35Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access keys - without knowing the admin secret key. This has been fixed and released in version RELEASE.2020-04-23T00-58-49Z.

References

Affected packages

Alpine:v3.17
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.18
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.19
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.20
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.21
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.22
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.23
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"
Alpine:v3.24
minio

Package

Name
minio
Purl
pkg:apk/alpine/minio?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20200423-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-11012.json"