CVE-2023-28803 — Traffic being bypassed by ZCC by configuring synthetic IP range as local network
An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affe…
Published: 2023-10-23 · CVSS: 5.9 · CVSS 3.1
An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7