We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-38952



Description

Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.

Reserved 2023-07-25 | Published 2023-08-03 | Updated 2024-10-17 | Assigner mitre

References

zkteco.com

claroty.com/team82/disclosure-dashboard/cve-2023-38952

cve.org (CVE-2023-38952)

nvd.nist.gov (CVE-2023-38952)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2023-38952

Support options

Helpdesk Chat, Email, Knowledgebase