CVE-2023-38952 — Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing th — CVE Database · The Intelligence Room