Lucene search
HistoryNov 08, 2022 - 11:15 p.m.
CVE-2022-30515
zkteco
biotime 8.5.4
authentication
employee photos
attacker
enumeration
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
37.1%
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.
Affected configurations
Node
zktecobiotimeMatch8.5.4
ORzktecobiotimeMatch8.5.5
Related
prion
prion
Authentication flaw
2022-11-08 23:15:00
cve
cve
CVE-2022-30515
2022-11-08 23:15:09
cvelist
cvelist
CVE-2022-30515
2022-11-08 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
37.1%
Related for NVD:CVE-2022-30515