Critical severity9.6NVD Advisory· Published Aug 31, 2023· Updated Jun 17, 2026

CVE-2023-28801

Description

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

Affected products

Zscaler/ZIA Admin Portalv5
Range: 6.2
Zscaler/Admin UIllm-create
Range: from 6.2 before 6.2r
Zscaler/Zscaler Internet Access Admin Portal
cpe:2.3:a:zscaler:zscaler_internet_access_admin_portal:*:*:*:*:*:*:*:*
Range: >=6.2,<6.2r

Patches

Vulnerability mechanics

References

help.zscaler.com/zia/release-upgrade-summary-2023nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000