Sensitive Data: Minio Default Login¶

Identifier: minio_default_login

Scanner(s) Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner	ASM Scanner

Description¶

MinIO object storage service may be accessible with default admin credentials, allowing unauthorized access to storage buckets, data, and administrative functions.

How we test: We attempt to authenticate to the MinIO console interface using common default username and password combinations. If authentication succeeds, we report the vulnerability.

Reference:

https://docs.min.io/docs/minio-quickstart-guide.html#

Configuration¶

Example¶

Example configuration:

---
security_tests:
  minio_default_login:
    skip: false

Reference¶

`skip`¶

Type : boolean

Skip the test if true.