Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Signature validation error in DLL allows disabling anti-tampering protection
Vulnerability Description
An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
密码学签名的验证不恰当
Vulnerability Title
Zscaler Client Connector 安全漏洞
Vulnerability Description
Zscaler Client Connector是Zscaler公司的一个轻量级代理。 Zscaler Client Connector 4.2.0之前版本存在安全漏洞，该漏洞源于签名验证不当，允许经过身份验证的用户禁用防篡改功能。
CVSS Information
N/A
Vulnerability Type
N/A