Zscaler Client Connector vulnerabilities, page 3
50 vulnerabilities
Known vulnerabilities in Zscaler Client Connector, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-28793zscalerclient_connector
EPSS score0.30%
Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.CVE-2023-28799zscalerclient_connectorEPSS score0.45%
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.CVE-2023-28803zscalerclient_connectorEPSS score0.26%
An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9.CVE-2023-28795zscalerclient_connectorEPSS score0.15%
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.CVE-2023-28805zscalerclient_connectorEPSS score0.35%
An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue affects Client Connector: before 1.4.0.105CVE-2023-28794zscalerclient_connectorEPSS score0.20%
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.CVE-2023-28797zscalerclient_connectorEPSS score0.22%
Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user.CVE-2023-28804zscalerclient_connectorEPSS score0.24%
An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105CVE-2023-28806zscalerclient_connectorEPSS score0.19%
An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows <4.2.0.190.CVE-2023-28802zscalerclient_connectorEPSS score0.23%
An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149.