CVE-2024-23464CWE-281

Zscaler bypass with administrative privileges on Windows

High · published August 6, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.2th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2024-08-06T15:24Z
EPSS history
Timeline
  • 06 AUG 15:24Z
    Zscaler bypass with administrative privileges on Windows
    cvelistv5