Unrated severityNVD Advisory· Published Nov 21, 2023· Updated Jan 6, 2026

Disable Zscaler using machine tunnel restart

CVE-2023-28802

Description

An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149.

Affected products

Zscaler/Client Connectorllm-fuzzy2 versions
<4.2.0.149+ 1 more
- (no CPE)range: <4.2.0.149
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

help.zscaler.com/client-connector/client-connector-app-release-summary-2023mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000