Disable Anti-Tampering Without Signature Validation in Zscaler Client Connector

CVE-2024-23456

What is CVE-2024-23456?

A vulnerability exists in the Zscaler Client Connector software where anti-tampering mechanisms can be bypassed under specific conditions. This flaw affects versions prior to 4.2.0.190 when anti-tampering is enabled, potentially allowing unauthorized modifications without the necessary signature validation. Users of affected versions should assess their configurations and consider upgrading to mitigate potential security risks.

References