Total
26 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-28804 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 5.3 MEDIUM |
An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105 | |||||
CVE-2023-28803 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 6.5 MEDIUM |
An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9. | |||||
CVE-2021-26736 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges. | |||||
CVE-2023-28795 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6. | |||||
CVE-2021-26738 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges. | |||||
CVE-2021-26735 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges. |