CVE-2024-23464 — Zscaler bypass with administrative privileges on Windows

CVE-2024-23464

Zscaler bypass with administrative privileges on Windows PUBLISHED

Description (CNA)

In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 4.2.1

CWE

CWE-281

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2.1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.