CVE-2022-30515

MEDIUM CVSS: 5.3 Published: 2022-11-08 Modified: 2026-06-17

Description

ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.

Affected Platforms

Zkteco Biotime

Weakness Type

CWE-306, CWE-306

References