CVE-2023-28796 — IPC Bypass Through PLT Section in ELF

CVE-2023-28796

IPC Bypass Through PLT Section in ELF PUBLISHED

Description (CNA)

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 1.3.1.6

CWE

CWE-94

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

CISA-ADP

No English description supplied.

No references supplied.