2022-11-08 00:00:00
mitre
PUBLISHED
ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.