Security Advisory
CVE-2022-30515
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.