CVE-2023-28801

Improper SAML signature verification

CVSS 9.6 CRITICALEPSS 0.3%CWE-347

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Produtos afetados

Zscaler · ZIA Admin Portal

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://help.zscaler.com/zia/release-upgrade-summary-2023