CVE-2024-1456

S3 Bucket Takeover in h2oai/h2o-3

High · published April 16, 2024

CVSS v3.0
7.1
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Published
2024-04-16T00:00Z
EPSS history
Timeline
  • 16 APR 00:00Z
    S3 Bucket Takeover in h2oai/h2o-3
    cvelistv5