high7.5Public exploit code
CVE-2017-14680
ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZKTime Web Software 2.0 - Improper Access Restrictions2017-08-18 · webapps · windows
Impact
ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkteco | Zktime Web | Version 2.0.1.12280 |