CVE-2023-28806 — Signature validation error in DLL allows disabling anti-tampering protection

CVE-2023-28806

Signature validation error in DLL allows disabling anti-tampering protection PUBLISHED

Description (CNA)

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 4.2.0.190

CWE

CWE-347

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.