Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AI PRP: Minio Weak credentials tester #478

Open
JamesFoxxx opened this issue Apr 30, 2024 · 3 comments
Open

AI PRP: Minio Weak credentials tester #478

JamesFoxxx opened this issue Apr 30, 2024 · 3 comments
Labels
Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this.

Comments

@JamesFoxxx
Copy link
Contributor

there are multiple default Minio usernames and passwords in the documentation which they asked us to change, if admins forget to change the default credentials it'll be dangerous.

Minio Documentation: https://min.io/docs/minio/linux/operations/installation.html

@maoning
Copy link
Collaborator

maoning commented May 7, 2024

@JamesFoxxx do you know if the auth can be verified against the MinIO API endpoint which is usually running at port 9000?

We noticed in the past that the MinIO dashboard is running at a random 5-digit port which is hard to always detect.

@JamesFoxxx
Copy link
Contributor Author

I can work on this, from first glance it has a constant port with the docker setup at least :)
https://min.io/docs/minio/container/index.html

@JamesFoxxx
Copy link
Contributor Author

@maoning but I'm curious now about what you are asking because it is supposed to be that admins use the default setup instructions which contain the default user/password. By default setup instructions the ports are constant too.(minio server ~/minio --console-address :9001)

@tooryx tooryx added the Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this. label May 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contributor queue When a contributor has already one issue/PR in review, we put the following ones on hold with this.
Projects
None yet
Development

No branches or pull requests

3 participants