ZKTeco ZKBioSecurity 3.0 Local Privilege Bypass Vulnerability

ZKBioSecurity is a comprehensive management platform for biometric security. A local privilege bypass vulnerability exists in ZKTeco ZKBioSecurity 3.0, which is caused by the visLogin.jsp script processing login requests via the 'EnvironmentUtil.getClientIprequest' method, allowing an attacker to...