MinIO is a high-performance, S3 compatible object store, open sourced under GNU AGPLv3 license. Minio is subject to a privilege escalation in IAM import API, all users are impacted since MinIO commit `580d9db85e04f1b63cc2909af50f0ed08afa965…
Exact source revision recorded 7 Nov 2026 00:36:30 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2024-3532
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Dec 16, 2024, 8:02:00 PM
dateUpdated: Dec 16, 2024, 8:18:46 PM
2 related source bulletins · separate from aliases
WID-SEC-W-2024-3706: MinIO: Schwachstelle ermöglicht Privilegieneskalation
CVE-2024-55949
openSUSE-SU-2024:14603-1: govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media
CVE-2024-12289 · CVE-2024-28053 · CVE-2024-45338 · CVE-2024-48872 · CVE-2024-54083 · CVE-2024-54682 · CVE-2024-55885 · CVE-2024-55949
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON