Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-566m-cw2f-427v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.

EPSS

Процентиль: 59%
0.00377
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
больше 5 лет назад

A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and download user faces from the database.

EPSS

Процентиль: 59%
0.00377
Низкий