CVE-2023-28801

Summary

CVE-2023-28801 is a privilege escalation vulnerability affecting the Zscaler Admin UI version 6.2 and below. The issue arises from an improper verification of cryptographic signatures in the SAML authentication process. This weakness allows attackers to bypass authentication and potentially gain unauthorized access to elevated administrative functions. Successful exploitation could lead to significant security implications, including data breaches and system compromise. Organizations using the Zscaler Admin UI are strongly advised to upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.