CVE-2024-23457

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2.0.209

Description The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced.

Recommendations For versions prior to 4.2.0.209, update to version 4.2.0.209 or later to resolve the issue. As a temporary workaround, consider restricting access to the uninstall functionality until a patch is applied.