Vulnerability Details CVE-2024-1456
An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.0%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2024-1456
-
H2o
»
H2o
»
Version: 3.45.0.6386
cpe:2.3:a:h2o:h2o:3.45.0.6386