Security Advisory

CVE-2017-13129

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-09-26 14:00:00

Last updated 2024-08-05 18:58:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of anti-CSRF tokens.

← Browse all CVEs View on cve.org ↗