CVE-2023-38952 (published 2023-08-03T00:00:00)
Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a