Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38952
HistoryAug 03, 2023 - 11:15 p.m.

Design/Logic Flaw

2023-08-0323:15:00
PRIOn knowledge base
www.prio-n.com
5
access control
zkteco biotime
unauthenticated attackers
sensitive information
http request

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.

CPENameOperatorVersion
biotimeeq8.5.5

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

Related for PRION:CVE-2023-38952