Filtered by vendor Zscaler
Subscribe
Total
29 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-28801 | 1 Zscaler | 1 Zscaler Internet Access Admin Portal | 2024-02-28 | N/A | 9.8 CRITICAL |
| An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r. | |||||
| CVE-2021-26737 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 4.7 MEDIUM |
| The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition. | |||||
| CVE-2023-28797 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.3 HIGH |
| Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user. | |||||
| CVE-2023-28804 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 5.3 MEDIUM |
| An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105 | |||||
| CVE-2023-28803 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 6.5 MEDIUM |
| An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9. | |||||
| CVE-2021-26736 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
| Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges. | |||||
| CVE-2023-28795 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
| Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6. | |||||
| CVE-2021-26738 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
| Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges. | |||||
| CVE-2021-26735 | 1 Zscaler | 1 Client Connector | 2024-02-28 | N/A | 7.8 HIGH |
| The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges. | |||||