Anti-Tampering bypass via Repair App functionality
CVE-2024-23463

8.8HIGH

Key Information:

Vendor

Zscaler

Status
Client Connector
Vendor
CVE Published:
30 April 2024

What is CVE-2024-23463?

A vulnerability exists in the Zscaler Client Connector that permits the bypassing of its anti-tampering protection under specific conditions, particularly when the Repair App functionality is executed. This flaw impacts users operating versions prior to 4.2.1 on Windows, potentially exposing them to various security threats.

Affected Version(s)

Client Connector Windows 0 < 4.2.1

References

https://help.zscaler.com/client-connector/client-connecto...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Randstad N.V. Red Team
.
CVE-2024-23463 : Anti-Tampering bypass via Repair App functionality