CVE-2024-23457: Anti-tampering can be disabled with uninstall password enforced
The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23457?
CVE-2024-23457 is classified as a high severity vulnerability due to its potential impact on the anti-tampering functionality.
How do I fix CVE-2024-23457?
To fix CVE-2024-23457, upgrade the Zscaler Client Connector to version 4.2.0.209 or later.
Who is affected by CVE-2024-23457?
CVE-2024-23457 affects users of Zscaler Client Connector on Windows versions prior to 4.2.0.209.
What vulnerabilities does CVE-2024-23457 introduce?
CVE-2024-23457 introduces potential security risks by allowing the anti-tampering functionality to be disabled under certain conditions.
Is an uninstall password effective against CVE-2024-23457?
An uninstall password may not be effective against CVE-2024-23457, as the vulnerability compromises the anti-tampering feature.