high7.1
CVE-2024-1456
An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository.
Impact
An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| H2o | H2o | Version 3.45.0.6386 |