Abdullah Alqannam

**Name of the Vulnerable Software and Affected Versions** ZKTeko BioTime versions 8.5.4 and earlier **Description** An issue in the Authentication & Authorization component allows a remote attacker to obtain sensitive information. Monitor access logs for unusual activity. **Recommendations** For ZKTeko BioTime versions 8.5.4 and earlier, update the software immediately to resolve the issue. As a temporary workaround, consider restricting access to the Authentication & Authorization component until a patch is available.