Lucene search

K
nvd[email protected]NVD:CVE-2023-28798
HistoryMay 02, 2024 - 1:23 p.m.

CVE-2023-28798

2024-05-0213:23:05
CWE-122
web.nvd.nist.gov
zscaler client connector
out-of-bounds write
mac
arbitrary code execution

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2023-28798