CVEvulnerability
CVE-2023-38952
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-03
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-552
Description
Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin users are not enforced and any authenticated user can leverage admin functions without restriction by making direct requests to administrative endpoints.
Affected configurations
• zkteco biotime 8.5.5
Related
Weakness · CWE (1)
- CWE-552 Files or Directories Accessible to External Parties weakness
References
- https://claroty.com/team82/disclosure-dashboard/cve-2023-38952 Third Party Advisory
- https://github.com/omair2084/biotime-rce-8.5.5/blob/main/biotime_enum.py github.com
- https://krashconsulting.com/fury-of-fingers-biotime-rce/ krashconsulting.com
- https://claroty.com/team82/disclosure-dashboard/cve-2023-38952 Third Party Advisory
- https://sploitus.com/exploit?id=PACKETSTORM:177859 sploitus.com