CVE-2020-11635

2021-02-1619:37:39

Zscaler

www.cve.org

zscaler

client connector

rpc validation

vulnerability

system privileges

limited actions

EPSS

Percentile

12.6%

JSON

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges.

CNA Affected

[
  {
    "product": "Zscaler Client Connector for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.1.0"
      }
    ]
  }
]

References

trust.zscaler.com/posts/7316

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-11635