The H2O machine learning platform uses "Iced" classes as the primary means of moving Java Objects around the cluster.
Date: 2024-07
Attack vector: deserialization
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2024-6960
CWE: CWE-502
CVSS: 7.5 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)

The H2O machine learning platform uses "Iced" classes as the primary means of moving Java Objects around the cluster. The Iced format supports inclusion of serialized Java objects. When a model is deserialized, any class is allowed to be deserialized (no class whitelist). An attacker can construct a crafted Iced model that uses Java gadgets and leads to arbitrary code execution when imported to the H2O platform.


Mitigations:

Architectural layers (MAESTRO):