CVE-2016-10140

HIGH 7.5CVE-2016-10140 · Published 13/01/2017 · updated 17/06/2026

In short

CVE-2016-10140 is a HIGH (CVSS 7.5) vulnerability affecting zoneminder (zoneminder).
Chance of exploitation in the next 30 days (EPSS): 6.6%, higher than 93.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
zoneminder zoneminder	`= 1.30.0`	No fix yet

Description

Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a remote unauthenticated attacker can view all CCTV images on the server via the /events URI.

References

More vulnerabilities in zoneminder

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

zoneminder

= 1.30.0

No fix yet

Description

More vulnerabilities in zoneminder

See all →