PT-2024-12178 · Zscaler · Zscaler Client Connector
CVE-2023-28806
·
Published
2024-08-06
·
Updated
2024-08-07
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Zscaler Client Connector on Windows versions prior to 4.2.0.190
Description
The issue is related to an improper validation of signature, allowing an authenticated user to disable anti-tampering.
Recommendations
For versions prior to 4.2.0.190, update to version 4.2.0.190 or later to resolve the issue.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Zscaler Client Connector