Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-23456

Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector <4.2.0.190 with anti-tampering enabled.

Published

2024-08-06T16:15:47.060

Last Modified

2024-08-07T21:30:09.227

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-347
Type: Primary
CWE-347

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	zscaler	client_connector	< 4.2.0.190	Yes

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190 Vendor Advisory ([email protected])