S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Oct 8, 2024

CVE-2024-25723 Scanner

Detects 'Improper Authentication' vulnerability in ZenML affects before v. 0.46.7.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.6k
Times Used
continuous scan runs
5.8k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2024-25723
8.8
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/{user_name_or_id}/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched versions: 0.44.4, 0.43.1, and 0.42.2.

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Affected
n/aby n/a
n/a
zenmlby zenmlio
AFFECTED< 0.46.7SAFE ✓≥ 0.46.7
Updated Sep 10, 2026View on NVD →
Detail

ZenML is an open-source machine learning development framework that is designed to simplify the process of setting up and maintaining a machine learning pipeline. Used by data scientists, software developers, and researchers, ZenML standardizes and automates common tasks within the machine learning workflow. It is implemented in Python and offers compatibility with popular ML tools and libraries, facilitating seamless integration into existing systems. As companies and individuals employ ZenML to streamline their machine learning processes, ensuring a secure environment is essential to protecting sensitive data. Therefore, monitoring and addressing vulnerabilities in ZenML is critical for maintaining the integrity and reliability of machine learning operations.

The Improper Authentication vulnerability in ZenML Server stems from insufficient validation in the /api/v1/users/{user_name_or_id}/activate endpoint. Specifically, it allows privilege escalation by accepting authentication based on a valid username without additional security checks. This flaw is particularly concerning as it can be exploited remotely, potentially leading to unauthorized system control and data exposure. If exploited, attackers could bypass legitimate authentication processes, gaining unauthorized access to the application. This vulnerability emphasizes the need for rigorous access control and validation in deployment endpoints. As improper authentication mechanisms are frequently targeted by attackers, resolving such issues is paramount to preventing unauthorized access.

Technically, the vulnerability is focused on the authentication mechanism used by ZenML Server's REST API endpoint /api/v1/users/{user_name_or_id}/activate. Exploiting this vulnerability requires crafting a request that can trick the server into authorizing a user based on a valid username and a new password specified in the request body. Attackers might manipulate the request headers or payloads to achieve unauthorized access, highlighting weaknesses in the access control logic. These conditions illustrate how relatively simple flaws in endpoint logic can lead to significant security issues. Properly securing this endpoint is essential to maintain the confidentiality and integrity of user accounts and data. Additionally, thorough testing of all API endpoints should be conducted to prevent similar flaws.

When exploited, this vulnerability may have substantial consequences including unauthorized access to sensitive data, user account takeover, and potential data manipulation or deletion. Attackers could use the access gained to alter configurations, extract confidential information, or execute unauthorized commands. The risk of privilege escalation means that sensitive administrative functions or data could become compromised. Organizations could face legal liabilities and reputational damage in the wake of successful exploitation. Ensuring robust authentication logic and comprehensive access controls is essential to prevent these potential adverse outcomes and maintain system security.

REFERENCES

Solution Advice

To remediate the Improper Authentication vulnerability in ZenML, consider implementing the following measures:

  • Introduce comprehensive access controls to ensure only authorized entities can activate user accounts.
  • Enhance authentication mechanisms with multi-factor authentication to strengthen security.
  • Conduct thorough code reviews to identify and address similar authentication weaknesses in the API.
  • Regularly update ZenML and its dependencies to benefit from security patches and improvements.
  • Incorporate automated security testing tools to detect known vulnerabilities in your framework.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.