PT-2023-21980 · Zscaler · Zscaler Client Connector

CVE-2023-28804

·

Publicado

2023-10-23

·

Atualizado

2023-10-27

CVSS v3.1

8.2

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 1.4.0.105
Description An Improper Verification of Cryptographic Signature issue allows replacing binaries in Zscaler Client Connector on Linux.
Recommendations For versions prior to 1.4.0.105, update to version 1.4.0.105 or later to resolve the issue.

Correção

Improper Verification of Cryptographic Signature

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2023-28804

Produtos afetados

Zscaler Client Connector