CVE-2023-28806: Signature validation error in DLL allows disabling anti-tampering protection
Published Aug 6, 2024
·Updated
An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.
Affected Software
1 affected component
Zscaler Client Connector Windows<4.2.0.190
Event History
Aug 6, 2024
CVE Published
via MITRE·03:41 PM
Data Sourced
via MITRE·03:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-28806?
CVE-2023-28806 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2023-28806?
To fix CVE-2023-28806, update the Zscaler Client Connector to version 4.2.0.190 or later.
3
Who is affected by CVE-2023-28806?
CVE-2023-28806 affects users of the Zscaler Client Connector on Windows versions prior to 4.2.0.190.
4
What type of vulnerability is CVE-2023-28806?
CVE-2023-28806 is an improper validation of signature vulnerability.
5
Can an authenticated user exploit CVE-2023-28806?
Yes, an authenticated user can exploit CVE-2023-28806 to disable anti-tampering mechanisms.