HomeZscalerCVE-2023-28805

CVE-2023-28805

MEDIUM
6.7CVSS
Published: 2023-10-23
Updated: 2024-11-21
AI Analysis

Description

An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue affects Client Connector: before 1.4.0.105

CVSS Metrics

Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N
Attack Vector
local
Complexity
high
Privileges
none
User Action
none
Scope
changed
Confidentiality
high
Integrity
low
Availability
none
Weaknesses
CWE-78NVD-CWE-noinfo

Metadata

Primary Vendor
ZSCALER
Published
10/23/2023
Last Modified
11/21/2024
Source
NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

zscaler : client_connector

AI-Powered Remediation

Generate remediation guidance or a C-suite brief for this vulnerability.

Executive Intelligence Brief