CVE-2023-28794 — PAC Files Exposed to Internet Websites

CVE-2023-28794

PAC Files Exposed to Internet Websites PUBLISHED

Description (CNA)

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 1.3.1.6

CWE

CWE-346

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

CISA-ADP

No English description supplied.

No references supplied.