An issue in ZKTeco BioTime v.8.5.4 and before allows a remote malicious user to obtain sensitive information.