CVE-2023-28806

MEDIUM Year: 2023
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-347
View all →

Vulnerability Description

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.

Related Vulnerabilities

CVE-2017-10669

MEDIUM
CVSS:6.5(Medium)

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must...

CWE-3472017

CVE-2017-5066

MEDIUM
CVSS:6.5(Medium)

Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacke...

CWE-3472017

CVE-2018-0486

MEDIUM
CVSS:6.5(Medium)

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attac...

CWE-3472018

CVE-2018-0489

MEDIUM
CVSS:6.5(Medium)

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to ...

CWE-3472018

CVE-2018-15586

MEDIUM
CVSS:6.5(Medium)

Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.

CWE-3472018

CVE-2018-15587

MEDIUM
CVSS:6.5(Medium)

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as...

CWE-3472018