medium5.7

CVE-2023-28806

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering.

Impact

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.

Affected products

Vendor	Product	Affected versions
Zscaler	Client Connector	before 4.2.0.190

Weakness classification

CWE-347

References

NVD record
CVE.org record
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190