CVE-2024-1456 - Vulnerability Details - OpenCVE

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.

No CVSS v4.0

No CVSS v3.1

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
H2o	H2o
H2oai	H2o-3

Configuration 1 [-]

cpe:2.3:a:h2o:h2o:3.45.0.6386:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b

History

Mon, 28 Jul 2025 14:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		H2o H2o h2o
CPEs		cpe:2.3:a:h2o:h2o:3.45.0.6386:::::::*
Vendors & Products		H2o H2o h2o

MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published: 2024-04-16T00:00:13.641Z

Updated: 2024-08-01T18:40:21.031Z

Reserved: 2024-02-12T19:24:46.278Z

Link: CVE-2024-1456

Vulnrichment

Updated: 2024-08-01T18:40:21.031Z

NVD

Status : Analyzed

Published: 2024-04-16T00:15:08.170

Modified: 2025-07-28T14:04:52.003

Link: CVE-2024-1456

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-1456", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntr_ai", "dateReserved": "2024-02-12T19:24:46.278Z", "datePublished": "2024-04-16T00:00:13.641Z", "dateUpdated": "2024-08-01T18:40:21.031Z"}, "containers": {"cna": {"title": "S3 Bucket Takeover in h2oai/h2o-3", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-04-16T11:10:54.211Z"}, "descriptions": [{"lang": "en", "value": "An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover."}], "affected": [{"vendor": "h2oai", "product": "h2oai/h2o-3", "versions": [{"version": "unspecified", "status": "affected", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 7.1, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-840 Business Logic Errors", "cweId": "CWE-840"}]}], "source": {"advisory": "7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b", "discovery": "EXTERNAL"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1456", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-30T19:43:06.450082Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:h2oai:h2o-3:6386:*:*:*:*:*:*:*"], "vendor": "h2oai", "product": "h2o-3", "versions": [{"status": "affected", "version": "6386"}], "defaultStatus": "affected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T18:00:18.164Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:40:21.031Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:40:21.031Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1456", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-30T19:43:06.450082Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:h2oai:h2o-3:6386:*:*:*:*:*:*:*"], "vendor": "h2oai", "product": "h2o-3", "versions": [{"status": "affected", "version": "6386"}], "defaultStatus": "affected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-30T19:49:55.621Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "S3 Bucket Takeover in h2oai/h2o-3", "source": {"advisory": "7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "h2oai", "product": "h2oai/h2o-3", "versions": [{"status": "affected", "version": "unspecified", "versionType": "custom", "lessThanOrEqual": "latest"}]}], "references": [{"url": "https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b"}], "descriptions": [{"lang": "en", "value": "An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-840", "description": "CWE-840 Business Logic Errors"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-04-16T11:10:54.211Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1456", "state": "PUBLISHED", "dateUpdated": "2024-08-01T18:40:21.031Z", "dateReserved": "2024-02-12T19:24:46.278Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2024-04-16T00:00:13.641Z", "assignerShortName": "@huntr_ai"}, "dataVersion": "5.1"}