Zia File Type Control
Monthly
Policy evasion in Zscaler Internet Access File Type Control can allow a file to be improperly evaluated or attributed, potentially bypassing file-type enforcement in rare circumstances. The issue affects organizations using ZIA with File Type Control actively enforcing policies and requires a malicious file transfer through the ZIA tenant, low privileges (PR:L), and user interaction (UI:R). Impact is limited to low confidentiality/integrity policy-control evasion with no availability impact or code execution; no public exploit identified at time of analysis, and vendor-managed remediation is applied centrally by Zscaler.
Policy evasion in Zscaler Internet Access File Type Control can allow a file to be improperly evaluated or attributed, potentially bypassing file-type enforcement in rare circumstances. The issue affects organizations using ZIA with File Type Control actively enforcing policies and requires a malicious file transfer through the ZIA tenant, low privileges (PR:L), and user interaction (UI:R). Impact is limited to low confidentiality/integrity policy-control evasion with no availability impact or code execution; no public exploit identified at time of analysis, and vendor-managed remediation is applied centrally by Zscaler.