CVE-2023-28796: IPC Bypass Through PLT Section in ELF

IPC Bypass Through PLT Section in ELF

Status

Published

2023-10-23

Updated

2025-02-27

Assigning organization

Zscaler

Description

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 1.3.1.6affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19 ↗