CVE-2024-35433 - ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, with

CVE-2024-35433

Summary

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.

References

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35433.md

Vulnerable Configurations

CVSS

Base:	None
Impact:
Exploitability:

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

04-09-2024 - 20:35

Published

30-05-2024 - 18:15

Last modified

04-09-2024 - 20:35