Skip to content
OpenAdvisories
High · 8.2 CVE-2023-28804 EUVD-2023-32439GHSA-h7x8-97pc-7qrv

Linux ZCC allows unsigned updates, allowing elevated Code Execution

Published Oct 23, 2023 · Updated Oct 17, 2024 · Assigned by Zscaler

Description

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < 1.4.0.105 1.4.0.105

Advisories 1

References