CVE-2024-35430

In ZKTeco ZKBio CVSecurity v6.1.1R and earlier fixed in 6.1.3R an authenticated user can bypass password checks while exporting data from the application...

CVE-2024-35430

ZKTeco ZKBio CVSecurity versions v6.1.1_R and earlier are vulnerable to an improper privilege management flaw (CWE-269). This vulnerability allows an authenticated user to bypass password checks specifically when performing data exports from the application. The issue has been addressed in versio...