CVE-2023-28802 — Disable Zscaler using machine tunnel restart

CVE-2023-28802

Disable Zscaler using machine tunnel restart PUBLISHED

Description (CNA)

An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 4.2.0.149

CWE

CWE-354

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2

CISA-ADP

No English description supplied.

No references supplied.