Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-28803

Traffic being bypassed by ZCC by configuring synthetic IP range as local network

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zscaler

Description

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 3.9affected

References