Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the username parameter. Attackers can send requests to the authLoginAction!login.do script with varying username inputs to enumerate valid user accounts based on application responses.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
[CVE-2016-20030: CRITICAL] Vulnerability in ZKTeco ZKBioSecurity 3.0 allows attackers to identify valid usernames through partial input, posing a risk to user account security.#cve,CVE-2016-20030,#cybersecurity https://cvefind.com/CVE-2016-20030
Post summary
The text announces a critical vulnerability (CVE-2016-20030) in ZKTeco ZKBioSecurity 3.0 that allows attackers to enumerate valid usernames via partial input.
CVE-2016-20030 ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters … https://www.cve.org/CVERecord?id=CVE-2016-20030
Post summary
The text announces CVE-2016-20030 as a user enumeration flaw in ZKTeco ZKBioSecurity 3.0, allowing unauthenticated actors to learn valid usernames; no exploitation evidence, PoC, or patch information is provided.