Unrated severityNVD Advisory· Published Oct 23, 2023· Updated Oct 17, 2024

Linux ZCC allows unsigned updates, allowing elevated Code Execution

CVE-2023-28804

Description

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105

Affected products

Zscaler/Client Connectorllm-fuzzy2 versions
<1.4.0.105+ 1 more
- (no CPE)range: <1.4.0.105
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

help.zscaler.com/client-connector/client-connector-app-release-summary-2023mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000