Detections
Analytics

Alpine: multiple minio packages: security update to 0.20200423-r0

high Tenable Cloud Security Plugin ID 405588

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin
 API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service
 accounts for existing access keys - without knowing the admin secret key. This has been fixed and released
 in version RELEASE.2020-04-23T00-58-49Z. (CVE-2020-11012)

See Also

https://security.alpinelinux.org/vuln/CVE-2020-11012

Plugin Details

Severity: High

ID: 405588

Version: Revision 1.27

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2020-11012

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/23/2020

Reference Information

CVE: CVE-2020-11012