Lucene search
MitreCVELIST:CVE-2023-38952HistoryAug 03, 2023 - 12:00 a.m.
CVE-2023-38952
2023-08-0300:00:00
mitre
www.cve.org
2
access control
zkteco biotime
unauthenticated attackers
sensitive information
http request
backup files
user credentials
Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.
Related
nvd
nvd
CVE-2023-38952
2023-08-03 23:15:11
prion
prion
Design/Logic Flaw
2023-08-03 23:15:00
cve
cve
CVE-2023-38952
2023-08-03 23:15:11
zdt
zdt
BioTime Directory Traversal / Remote Code Execution Exploit
2024-04-01 00:00:00
packetstorm
packetstorm
BioTime Directory Traversal / Remote Code Execution
2024-04-01 00:00:00