Andreas Auernhammer 3f09c17bfe fix authentication bypass against Admin-API (#5412) ...

This change fixes an authentication bypass attack against the
minio Admin-API. Therefore the Admin-API rejects now all types of
requests except valid signature V2 and signature V4 requests - this
includes signature V2/V4 pre-signed requests.

Fixes #5411

2018-01-17 10:36:25 -08:00

7.5 KiB

Raw Blame History

View Raw