Uninstall Password Can Disable Anti-Tampering Functionality

CVE-2024-23457

What is CVE-2024-23457?

The Zscaler Client Connector possesses a vulnerability stemming from its anti-tampering functionality, which can be disabled under specific conditions when an uninstall password is enforced. This issue specifically affects Zscaler Client Connector on Windows systems before version 4.2.0.209. Organizations utilizing older versions should prioritize updates to mitigate the risk associated with this vulnerability, as it may lead to unauthorized uninstallation of the software, compromising the security of the device.

References