CVE-2022-35919

Name of the Vulnerable Software and Affected Versions MinIO (affected versions not specified)

Description The issue affects MinIO, a High Performance Object Storage, where admin users authorized for admin:ServerUpdate can trigger an error that returns the content of the requested path. This allows access to contents at arbitrary paths readable by the MinIO process.

Recommendations For all affected versions, users are advised to upgrade. As a temporary workaround, consider disabling the ServerUpdate API by denying the admin:ServerUpdate action for admin users via IAM policies.