medium5.3
CVE-2022-30515
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.
Impact
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zkteco | Biotime | Versions 8.5.4, 8.5.5 |