ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-30515

PoC —
CVSS 3.1
5.3 medium
EPSS
<1%p51
Published
()
Modified
Description

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.

Vendors
zkteco
Products
biotime
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

No ingested article mentions this CVE yet.