Exploit for CVE-2023-28432_docker

kitploit · 2026-09-03

Description

MinIO clusters are affected by an information disclosure vulnerability.

Entry point

ParameterMinioEnv · nested

Pathminio/bootstrap/v1/verify

Unauthenticated access to sensitive environment variables exposed via /minio/bootstrap/v1/verify (MinioEnv data)

Affected Minio versions

Minio< 2023-03-20t20-16-18z

All known vulnerabilities by product

Alt Linux Minio Red Os

CVSS 7.5 for CVE-2023-28432

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

CVE Information

Exploit Details

Modified:2026-09-03 17:34

Last Seen:2026-09-04 12:19

Reporter:KitPloit

Tags

MinIO clustersinformation disclosureCVE-2023-28432cluster configuration

Other exploits for CVE-2023-28432

2026-09-13 KitPloitKITPLOIT

CVE-2023-28432-metasploit-scanner

2026-09-13 KitPloitKITPLOIT

CVE-2023-28432-minio_update_rce

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

Minio-CVE-2023-28432

2026-09-13 KitPloitKITPLOIT

2026-09-12 KitPloitKITPLOIT

Exploit Code

MARKDOWN14 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-H0NG10-CVE-2023-28432_DOCKER
# CVE-2023-28432_docker

CVE-2023-28432에 대한 테스트 환경, MinIO 클러스터의 정보 노출.

디렉토리는 MinIO 클러스터의 다양한 버전/구성을 제공합니다:

Directory| Remark  
---|---  
leaked-key| 취약한 인스턴스, (더 이상 사용되지 않는) MINIO_ACCESS_KEY 환경 변수 사용  
leaked-password| 취약한 인스턴스, MINIO_ROOT_PASSWORD 환경 변수 사용.  
no-password| 취약한 인스턴스, 비밀번호가 설정되지 않은 경우 기본 자격 증명 사용  
not-vulnerable| 안전한 인스턴스  
not-vulnerable-default-pw| 안전한 인스턴스, 기본 자격 증명 사용으로 인해 취약함