vulnerability

Zscaler Client Connector: CVE-2023-28806: Improper Verification of Cryptographic Signature

Severity
5
CVSS
(AV:L/AC:H/Au:M/C:C/I:C/A:N)
Published
Aug 6, 2024
Added
Jun 5, 2025
Modified
Jun 6, 2025

Description

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows less than4.2.0.190.

Solution

zscaler-client-connector-update-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.