CVE-2024-23464

Published: Aug 6, 2024Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1

Affected (1)

Products: Zscaler: Client Connector

Zscaler

1 product

Client Connector

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zscaler Client Connector	Before 4.2.1

Related CWEs

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (1)

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2.1

Source: cve@zscaler.com

Vendor Advisory

Timeline

No history available yet.