Lucene search

ZscalerVULNRICHMENT:CVE-2024-23456

HistoryAug 06, 2024 - 3:21 p.m.

CVE-2024-23456 Signature validation issue leads to Anti-Tampering bypass

2024-08-0615:21:51

CWE-347

Zscaler

github.com

cve-2024-23456

anti-tampering bypass

zscaler client connector

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

18.6%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector <4.2.0.190 with anti-tampering enabled.

CNA Affected

[
  {
    "vendor": "Zscaler",
    "product": "Client Connector",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.2.0.190",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Windows"
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:*:*:*"
    ],
    "vendor": "zscaler",
    "product": "client_connector",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.2.0.190",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

18.6%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-23456