2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"h2oai/h2o-3","vendor":"h2oai","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@huntr.dev"},{"affectedData":[{"cpes":["cpe:2.3:a:h2oai:h2o-3:6386:*:*:*:*:*:*:*"],"defaultStatus":"affected","product":"h2o-3","vendor":"h2oai","versions":[{"status":"affected","version":"6386"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:h2o:h2o:3.45.0.6386:*:*:*:*:*:*:*","matchCriteriaId":"915368D8-80F1-4CF4-B44C-008948F6DA1F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover."},{"lang":"es","value":"Se identificó una vulnerabilidad de toma de control del depósito S3 en el repositorio h2oai/h2o-3. El problema involucra al depósito S3 'http://s3.amazonaws.com/h2o-training', que resultó ser vulnerable a adquisiciones no autorizadas."}],"id":"CVE-2024-1456","lastModified":"2026-06-17T07:04:16.990","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"security@huntr.dev","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1456","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-30T19:43:06.450082Z","version":"2.0.3"}}]},"published":"2024-04-16T00:15:08.170","references":[{"source":"security@huntr.dev","tags":["Exploit","Issue Tracking","Third Party Advisory"],"url":"https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"],"url":"https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b"}],"sourceIdentifier":"security@huntr.dev","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-840"}],"source":"security@huntr.dev","type":"Secondary"}]}
|