CVE-2022-38801

概要

参考情報

• gist.github.com/hamoshwani/5ac860dd6757440174f446c62b24653f · Third Party Advisory
• zkteco.com · Product

biotime のその他の脆弱性

• CVE-2024-13966高 7.3ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default val…
• CVE-2024-6523中 5.4A vulnerability was found in ZKTeco BioTime up to 9.5.2. It has been classified as problematic. Affected is an unknown function of the compo…
• CVE-2023-51142高 7.5An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.
• CVE-2023-51141中 6.5An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorizatio…
• CVE-2023-38952高 7.5Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that ses…