| Package | Affected versions | Patched versions |
|---|---|---|
| biotime | < 9.0.4 | 9.0.4 |
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords (located under the Attendance Settings tab as "Self-Password").
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free