automatic module_metadata_base.json update
This commit is contained in:
parent
0252429715
commit
172a200525
|
@ -23606,6 +23606,67 @@
|
|||
|
||||
]
|
||||
},
|
||||
"auxiliary_gather/minio_bootstrap_verify_info_disc": {
|
||||
"name": "MinIO Bootstrap Verify Information Disclosure",
|
||||
"fullname": "auxiliary/gather/minio_bootstrap_verify_info_disc",
|
||||
"aliases": [
|
||||
|
||||
],
|
||||
"rank": 300,
|
||||
"disclosure_date": "2023-03-20",
|
||||
"type": "auxiliary",
|
||||
"author": [
|
||||
"joel <joel @ ndepthsecurity>",
|
||||
"RicterZ"
|
||||
],
|
||||
"description": "MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with\n RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns\n all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`,\n resulting in information disclosure.\n\n Verified against MinIO 2023-02-27T18:10:45Z",
|
||||
"references": [
|
||||
"URL-https://github.com/minio/minio/security/advisories/GHSA-6xvq-wj2x-3h3q",
|
||||
"CVE-2023-28432"
|
||||
],
|
||||
"platform": "",
|
||||
"arch": "",
|
||||
"rport": 9000,
|
||||
"autofilter_ports": [
|
||||
80,
|
||||
8080,
|
||||
443,
|
||||
8000,
|
||||
8888,
|
||||
8880,
|
||||
8008,
|
||||
3000,
|
||||
8443
|
||||
],
|
||||
"autofilter_services": [
|
||||
"http",
|
||||
"https"
|
||||
],
|
||||
"targets": null,
|
||||
"mod_time": "2024-03-08 08:54:38 +0000",
|
||||
"path": "/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb",
|
||||
"is_install_path": true,
|
||||
"ref_name": "gather/minio_bootstrap_verify_info_disc",
|
||||
"check": false,
|
||||
"post_auth": false,
|
||||
"default_credential": false,
|
||||
"notes": {
|
||||
"Stability": [
|
||||
"crash-safe"
|
||||
],
|
||||
"Reliability": [
|
||||
|
||||
],
|
||||
"SideEffects": [
|
||||
"ioc-in-logs"
|
||||
]
|
||||
},
|
||||
"session_types": false,
|
||||
"needs_cleanup": false,
|
||||
"actions": [
|
||||
|
||||
]
|
||||
},
|
||||
"auxiliary_gather/mongodb_js_inject_collection_enum": {
|
||||
"name": "MongoDB NoSQL Collection Enumeration Via Injection",
|
||||
"fullname": "auxiliary/gather/mongodb_js_inject_collection_enum",
|
||||
|
|
Loading…
Reference in New Issue