CVE-2023-28795

EPSS 0.03%
Published 23.10.2023 14:15:09
Last modified 21.11.2024 07:56:01
Source cve@zscaler.com
Teams watchlist Login
Open Login

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Zscaler ≫ Client Connector SwPlatformlinux Version < 1.3.1.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.055

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cve@zscaler.com	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2023-28795

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28795

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28795

EUVD