CVE-2024-22988

ZKteco ZKBio WDMS before 9.0.2 Build 20250526 allows an attacker to download a database backup via the /files/backup/ component because the filename is based on a predictable timestamp...

CVE-2024-22988

The ZKBio WDMS software (versions prior to 9.0.2 Build 20250526 , including specific mentions of v.8.0.5 ) is vulnerable to a design/logic flaw in the /files/backup/ component. An attacker can exploit this by downloading database backups because the filenames are based on a predictable timestamp ...