Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)

2025-05-12
Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)

2025-05-12
ZKTeco’s ZKBio CVSecurity and ZKBioTime Receive Safe-to-Host Certifications from Indusface

2025-03-25
System Issues Resolved

2024-06-24
System Update Notification

2024-06-14
ZKTeco PSIRT

2021-08-20

Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)

2025-05-12

Vulnerability Details

Vulnerability Number: CVE-2023-38952

Scope of Impact: BioTime v8.5.5 and earlier

Vulnerability Overview: Insecure access controls exist, allowing HTTP requests to read sensitive backup files and access confidential information, including user credentials.

Vulnerability Solution

A. This vulnerability has been addressed in ZKBioTime version 9.0.1 (20240617.19506). It is strongly recommended to update to the latest version. The installation package can be downloaded from the official website.

Contact Information

A. Please email xmtam@zkteco.com to obtain the patch package for the fixed version.

B. You may call the ZKTeco customer service hotline at 400-6900-999 to request the patch package for the repaired version.

C. You may also contact the ZKTeco branch in your region to obtain the patch package for the repaired version.

Notice Regarding Security Vulnerability in BioTime (Path Transversal Vulnerability)

Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)

ZKTeco’s ZKBio CVSecurity and ZKBioTime Receive Safe-to-Host Certifications from Indusface

System Issues Resolved

System Update Notification

ZKTeco PSIRT

Notice Regarding Security Vulnerability in BioTime (Access Control Security Vulnerability)