CVE-2019-7347 | BDVDB-2026-112445 Detail

Description#

A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records (add/delete Monitors, Users, etc.).

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-02-04Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.