Unrated severityNVD Advisory· Published Oct 23, 2023· Updated Sep 11, 2024

Traffic being bypassed by ZCC by configuring synthetic IP range as local network

CVE-2023-28803

Description

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9.

Affected products

Zscaler/Client Connectorllm-fuzzy2 versions
<3.9+ 1 more
- (no CPE)range: <3.9
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

help.zscaler.com/client-connector/client-connector-app-release-summary-2023mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000