Anti-Tampering bypass via Repair App functionality
CVE-2024-23463

8.8HIGH

Key Information:

Vendor

Zscaler

Status
Client Connector
Vendor
CVE Published:
30 April 2024

What is CVE-2024-23463?

A vulnerability exists in the Zscaler Client Connector that permits the bypassing of its anti-tampering protection under specific conditions, particularly when the Repair App functionality is executed. This flaw impacts users operating versions prior to 4.2.1 on Windows, potentially exposing them to various security threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Client Connector Windows 0 < 4.2.1

References

https://help.zscaler.com/client-connector/client-connecto...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Randstad N.V. Red Team
JSON
.