automatic module_metadata_base.json update

This commit is contained in:
Metasploit 2024-03-11 09:10:38 -05:00
parent 0252429715
commit 172a200525
No known key found for this signature in database
GPG Key ID: CDFB5FA52007B954
1 changed files with 61 additions and 0 deletions

View File

@ -23606,6 +23606,67 @@
]
},
"auxiliary_gather/minio_bootstrap_verify_info_disc": {
"name": "MinIO Bootstrap Verify Information Disclosure",
"fullname": "auxiliary/gather/minio_bootstrap_verify_info_disc",
"aliases": [
],
"rank": 300,
"disclosure_date": "2023-03-20",
"type": "auxiliary",
"author": [
"joel <joel @ ndepthsecurity>",
"RicterZ"
],
"description": "MinIO is a Multi-Cloud Object Storage framework. In a cluster deployment starting with\n RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns\n all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`,\n resulting in information disclosure.\n\n Verified against MinIO 2023-02-27T18:10:45Z",
"references": [
"URL-https://github.com/minio/minio/security/advisories/GHSA-6xvq-wj2x-3h3q",
"CVE-2023-28432"
],
"platform": "",
"arch": "",
"rport": 9000,
"autofilter_ports": [
80,
8080,
443,
8000,
8888,
8880,
8008,
3000,
8443
],
"autofilter_services": [
"http",
"https"
],
"targets": null,
"mod_time": "2024-03-08 08:54:38 +0000",
"path": "/modules/auxiliary/gather/minio_bootstrap_verify_info_disc.rb",
"is_install_path": true,
"ref_name": "gather/minio_bootstrap_verify_info_disc",
"check": false,
"post_auth": false,
"default_credential": false,
"notes": {
"Stability": [
"crash-safe"
],
"Reliability": [
],
"SideEffects": [
"ioc-in-logs"
]
},
"session_types": false,
"needs_cleanup": false,
"actions": [
]
},
"auxiliary_gather/mongodb_js_inject_collection_enum": {
"name": "MongoDB NoSQL Collection Enumeration Via Injection",
"fullname": "auxiliary/gather/mongodb_js_inject_collection_enum",