Lucene search
+L

319 matches found

CNNVD
CNNVD
added 2024/03/26 12:00 a.m.45 views

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

7.8CVSS6.6AI score0.00313EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.9 views

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

7.8CVSS6.8AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.10 views

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

7.8CVSS6.7AI score0.00275EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.11 views

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

7.3CVSS6.8AI score0.00307EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/21 11:15 a.m.30 views

CVE-2023-28802

An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...

5.4CVSS0.00229EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/21 11:15 a.m.22 views

Input validation

An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...

5.5CVSS7AI score0.00229EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/21 12:00 a.m.16 views

PT-2023-21978

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2.0.149 Description An issue with improper validation of integrity check values in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service...

5.4CVSS5.5AI score0.00229EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/21 12:00 a.m.10 views

Zscaler Client Connector Security Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

5.4CVSS6.5AI score0.00229EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/06 8:15 a.m.11 views

CVE-2023-28794

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/06 8:15 a.m.28 views

CVE-2023-28794

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

6.5CVSS5.1AI score0.00203EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 8:15 a.m.27 views

Input validation

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS7.4AI score0.00203EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 7:19 a.m.36 views

CVE-2023-28794 PAC Files Exposed to Internet Websites

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS6.7AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/06 7:19 a.m.52 views

CVE-2023-28794

CVE-2023-28794 concerns an Origin Validation Error in Zscaler Client Connector for Linux prior to version 1.3.1.6 . Multiple connected sources (e.g., PT-2023-21970, RH, NVD, Red Hat, CNNVD mirrors) describe a vulnerability that could permit privilege abuse due to faulty origin validation. Affecte...

6.5CVSS5.1AI score0.00203EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/06 7:19 a.m.20 views

CVE-2023-28794 PAC Files Exposed to Internet Websites

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

4.3CVSS7AI score0.00203EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.14 views

Zscaler Client Connector Access Control Error Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

6.5CVSS6.7AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/23 2:15 p.m.29 views

CVE-2023-28803

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9...

6.5CVSS6.2AI score0.00261EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/23 2:15 p.m.12 views

CVE-2023-28797

Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user...

7.3CVSS5.9AI score0.00217EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/23 2:15 p.m.14 views

CVE-2023-28795

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

7.8CVSS5.8AI score0.00147EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/23 2:15 p.m.10 views

CVE-2023-28804

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105...

5.3CVSS5.8AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/23 2:15 p.m.9 views

CVE-2021-26736

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges...

7.8CVSS6AI score0.00225EPSS
SaveExploits0References1
Rows per page
Query Builder