CVE-2023-28794: PAC Files Exposed to Internet Websites

PAC Files Exposed to Internet Websites

Status

Published

2023-11-06

Updated

2024-09-05

Assigning organization

Zscaler

Description

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 1.3.1.6affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19 ↗