CVE-2023-51141

Published: Apr 11, 2024Modified: Jul 9, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component

Affected (1)

Products: Zkteco: Biotime

Zkteco

1 product

Biotime

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zkteco Biotime	Version 8.5.4

Related CWEs

CWE-639

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

https://gist.github.com/ipxsec/1680d29c49fe368be81b037168175b10

Source: cve@mitre.org

ExploitThird Party Advisory

https://gist.github.com/ipxsec/1680d29c49fe368be81b037168175b10

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.