34 野に咲く名無し@転載禁止 (主) 2023/09/05 01:17:36
Hackers Exploit MinIO Storage System Vulnerabilities to Compromise Servers
https://thehackernews.com/2023/09/hackers-exploit-minio-storage-system.html
Cybersecurity and incident response firm Security Joes said the intrusion leveraged a publicly available exploit chain to backdoor the MinIO instance.
The comprises CVE-2023-28432 (CVSS score: 7.5) and CVE-2023-28434 (CVSS score: 8.8), the former of which was added to the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog on April 21, 2023.