CVE-2024-35430

In ZKTeco ZKBio CVSecurity v6.1.1R and earlier fixed in 6.1.3R an authenticated user can bypass password checks while exporting data from the application...

CVE-2024-35430

CVE-2024-35430 affects ZKTeco ZKBio CVSecurity, specifically versions 6.1.1_R and earlier. An authenticated user can bypass password checks when exporting data from the application, indicating a severe access-control bypass in the export workflow. The fixed version is 6.1.3_R (per the provided de...