CVE Catalog
CVE-2023-51141
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.71%
49th percentile - higher than 49% of all known CVEs
Summary
A vulnerability in ZKTeko BioTime version 8.5.4 and earlier allows a remote attacker to obtain sensitive information through the Authentication & Authorization component.
Risk Assessment
An attacker could capture authentication data or other confidential information, potentially leading to unauthorized system access and data breach.
Recommendation
Immediately update ZKTeko BioTime to the latest available version that fixes this vulnerability.
Original NVD description (English source)
An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component

