ZenML up to 0.56.3 session expiration

Summaryinfo

A vulnerability described as problematic has been identified in ZenML up to 0.56.3. This issue affects some unknown processing. Such manipulation leads to session expiration. This vulnerability is traded as CVE-2024-4680. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in ZenML up to 0.56.3. It has been rated as problematic. Affected by this issue is an unknown code block. The manipulation with an unknown input leads to a session expiration vulnerability. Using CWE to declare the problem leads to CWE-613. According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization." Impacted is confidentiality. CVE summarizes:

A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to insufficient session expiration. Specifically, the session does not expire after a password change, enabling an attacker to maintain access to a compromised account without the victim's ability to revoke this access. This issue was observed in a self-hosted ZenML deployment via Docker, where after changing the password from one browser, the session remained active and usable in another browser without requiring re-authentication.

The advisory is shared for download at huntr.com. This vulnerability is handled as CVE-2024-4680 since 05/09/2024. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 213483 (ZenML < 0.56.3 Unpatched Session Expiration Exposure (CVE-2024-4680)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (213483). Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• ZenML

Version

• 0.56.0
• 0.56.1
• 0.56.2
• 0.56.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion