MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-24747 · Microsoft / collected KEV context

EUVD-2024-0775

GHSA-xx8w-mq23-29g4

GO-2024-2499

cve-program · CVE-2024-24747

• https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4
• https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776
• https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z

euvd · EUVD-2024-0775

• https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4
• https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776
• https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z

nvd · CVE-2024-24747

• https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776
• https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z
• https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4

osv · GHSA-xx8w-mq23-29g4

• https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4
• https://nvd.nist.gov/vuln/detail/CVE-2024-24747
• https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776
• https://github.com/minio/minio
• https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z

osv · GO-2024-2499

• https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4
• https://nvd.nist.gov/vuln/detail/CVE-2024-24747
• https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776
• https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z

No related operational record is retained in the current change model.