PT-2023-21978 · Microsoft+1 · Windows+1

Simon Cecchini · Publicado 2023-11-21 · Atualizado 2026-01-06 · CVE-2023-28802

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2.0.149

Description An issue with improper validation of integrity check values in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics.

Recommendations For versions prior to 4.2.0.149, update to version 4.2.0.149 or later to resolve the issue. As a temporary workaround, consider restricting access to Zscaler Diagnostics to prevent interruption of the service restart.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

CVE-2023-28802

Produtos afetados

Windows

Zscaler Client Connector

Referências · 7

• https://t.me/cveNotify/147803 · Publicação no Telegram
• https://t.me/cvenotify/60934 · Publicação no Telegram
• https://t.me/cvenotify/60914 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-28802 · Nota de Segurança
• https://t.me/cvenotify/61491 · Publicação no Telegram
• https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2 · Nota
• https://osv.dev/vulnerability/CVE-2023-28802 · Aviso do Fabricante