UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41137

Minio is a Kubernetes native application for cloud storage. All users on release `RELEASE.2021-10-10T16-53-30Z` are affected by a vulnerability that involves bypassing policy restrictions on regular users. Normally, checkKeyValid() should return owner true for rootCreds. In the affected version, policy restriction did not work properly for users who did not have service (svc) or security token…

Severity
High 8.8
Published
13 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • Version 2021-10-10t16-53-30z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41137
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41137