UpHeron
All vulnerabilities

Servers and applications

CVE-2022-24842

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. This in turn allows the user to escalate privilege to that of the root user. This vulnerability has been…

Severity
High 8.8
Published
12 Apr 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2022-04-12t06-55-35z
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • From 2021-12-09t06-19-41z before 2022-04-12t06-55-35z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24842
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24842