Security Advisory

CVE-2020-17474

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-14 19:22:08
Last updated 2024-08-04 13:53:17
Assigner mitre
State PUBLISHED

Description

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.