Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-28806
PUBLISHED
More InfoOfficial Page
Assigner-Zscaler
Assigner Org ID-73c6f63b-efac-410d-a0a9-569700f85a04
View Known Exploited Vulnerability (KEV) details
Published At-06 Aug, 2024 | 15:41
Updated At-06 Aug, 2024 | 17:30
Rejected At-
▼CVE Numbering Authority (CNA)
Signature validation error in DLL allows disabling anti-tampering protection

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.

Affected Products
Vendor
Zscaler, Inc.Zscaler
Product
Client Connector
Platforms
  • Windows
Default Status
unaffected
Versions
Affected
  • From 0 before 4.2.0.190 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-347CWE-347 Improper Verification of Cryptographic Signature
Type: CWE
CWE ID: CWE-347
Description: CWE-347 Improper Verification of Cryptographic Signature
Metrics
VersionBase scoreBase severityVector
3.15.7MEDIUM
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Version: 3.1
Base score: 5.7
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-207CAPEC-207 Removing Important Client Functionality
CAPEC ID: CAPEC-207
Description: CAPEC-207 Removing Important Client Functionality
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Equinor Red Team
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190
N/A
Hyperlink: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Vendor
Zscaler, Inc.zscaler
Product
client_connector
CPEs
  • cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*
Default Status
unaffected
Versions
Affected
  • From 0 before 4.2.0.190 (custom)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found