DeutschShown in its original language — a full translation is planned for a future version.
ZScaler Client Connector: Mehrere Schwachstellen
view advisory published 2023-07-02
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ZScaler Client Connector ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-28800US | medium6.1 | — | ||
When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login. | ||||
| CVE-2023-28799US | medium6.1 | — | ||
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the… | ||||
02
references
External citations — patches, advisories, analysis.
- ZScaler Security Advisory vom 2023-07-02external
- ZScaler Security Advisory vom 2023-07-02external
- ZScaler Security Advisory vom 2023-07-02external
- ZScaler Security Advisory vom 2023-07-02external
- ZScaler Security Advisory vom 2023-07-02external
- ZScaler Security Advisory vom 2023-07-02external
- WID-SEC-W-2023-1616 - CSAF Versionself
- WID-SEC-2023-1616 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan