Lucene search
HistoryNov 06, 2023 - 8:15 a.m.
CVE-2023-28794
vulnerability
zscaler client connector
linux
privilege abuse
cve-2023-28794
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.3%
Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.
Affected configurations
Node
zscalerclient_connectorRange<1.3.1.6linux
Related
cve
cve
CVE-2023-28794
2023-11-06 08:15:22
prion
prion
Input validation
2023-11-06 08:15:00
cvelist
cvelist
CVE-2023-28794 PAC Files Exposed to Internet Websites
2023-11-06 07:19:25
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.3%
Related for NVD:CVE-2023-28794