CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection

Q: Is CVE-2023-28806 being exploited?

There is no known exploitation of CVE-2023-28806 in the wild and no public exploit code.

Q: How do I fix CVE-2023-28806?

No fix has been published for CVE-2023-28806 yet. Limit exposure of the affected software until one is available.

Medium 5.7 Published 6 Aug 2024 Updated 6 Aug 2024

An authenticated user can bypass anti-tampering protections in Zscaler Client Connector for Windows due to improper signature validation.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-28806?

CVE-2023-28806 is a medium-severity vulnerability in Zscaler Client Connector, published on 6 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.

Weakness: CWE-347

Which versions are affected by CVE-2023-28806?

It affects 1 product.

Products include Zscaler Client Connector.

How do I fix CVE-2023-28806?

No fix has been published for CVE-2023-28806 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-28806 being exploited?

There is no known exploitation of CVE-2023-28806 in the wild and no public exploit code.

Sources

Also known as GHSA-hrw8-hpf8-7q72.