CVE-2023-28795: Client IPC validation bypass
Published Oct 23, 2023
·Updated
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.
Affected Software
1 affected component
Zscaler Client Connector Linux<1.3.1.6
Event History
Oct 23, 2023
CVE Published
01:27 PM
Data Sourced
01:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-28795?
CVE-2023-28795 is a vulnerability in Zscaler Client Connector on Linux that allows the inclusion of code in an existing process.
2
How does CVE-2023-28795 impact Zscaler Client Connector for Linux?
CVE-2023-28795 affects Zscaler Client Connector for Linux versions before 1.3.1.6.
3
What is the severity of CVE-2023-28795?
CVE-2023-28795 has a severity score of 7.8 (high).
4
How can I fix CVE-2023-28795?
To fix CVE-2023-28795, make sure to update Zscaler Client Connector for Linux to version 1.3.1.6 or newer.
5
Where can I find more information about CVE-2023-28795?
You can find more information about CVE-2023-28795 on the Zscaler Client Connector release summary page for Linux, applicable version 1.3.1, deployment date September 19, 2022.