ZKTeco ZKTime Web 2.0.1.12280 Information Disclosure

Vulnerability Type: Broken Authentication Vendor of Product: ZKTeco Affected Product Code Base: ZKTime Web - 2.0.1.12280 Affected Component: ZK Time Web Interface Management. Attack Type: Local - Unauthenticated Impact: Information Disclosure ------------------------------------------ Product...

ZKTeco ZKTime Web 2.0.1.12280 Cross Site Request Forgery

Vulnerability Type: Cross Site Request Forgery CSRF Vendor of Product: ZKTeco Affected Product Code Base: ZKTime Web - 2.0.1.12280 Affected Component: ZK Time Web Interface Management. Attack Type: Local - Authenticated Impact: Escalation of Privileges ------------------------------------------...