{"action":"Upgrade org.apache.ozone:ozone to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"1.4.0"}],"component":"org.apache.ozone:ozone","cve_ids":["CVE-2024-45106"],"ecosystem":"Maven","epss":0.00576,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-rcq8-9q3j-98mw","id":"tcs_01M5N9BKBEEM0EBH2XJRDS2FD0","modified_at":"2024-12-03T19:27:14.551010Z","published_at":"2024-12-03T12:31:11Z","references":["https://osv.dev/vulnerability/GHSA-rcq8-9q3j-98mw","https://nvd.nist.gov/vuln/detail/CVE-2024-45106","https://github.com/apache/ozone/pull/5233","https://github.com/apache/ozone","https://lists.apache.org/thread/rylnxwttp004kvotpk9j158vb238pfkm","http://www.openwall.com/lists/oss-security/2024/12/02/1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-rcq8-9q3j-98mw","url":"https://osv.dev/vulnerability/GHSA-rcq8-9q3j-98mw"}],"summary":"Apache Ozone: Improper authentication when generating S3 secrets"}