CVE-2024-23463CWE-367

Anti-Tampering bypass via Repair App functionality

High · published April 30, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector on Windows prior to 4.2.1

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-04-30T16:17Z
EPSS history
Timeline
  • 30 APR 16:17Z
    Anti-Tampering bypass via Repair App functionality
    cvelistv5