Skip to content
OpenAdvisories
Critical · 9.6 CVE-2023-28801 EUVD-2023-32436GHSA-wfp5-6m78-crh3

Improper SAML signature verification

Published Aug 31, 2023 · Updated Oct 1, 2024 · Assigned by Zscaler

Description

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

Affected products

VendorProductAffectedFixed
Zscaler ZIA Admin Portal 6.2 – < 6.2 (current) 6.2 (current)

References