Zscaler Client Connector Access Control Error Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

PT-2023-21972 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Linux versions prior to 1.3.1.6 Description: The issue is related to an Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux, which allows Code Injection...

Zscaler Client Connector Code Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

The vulnerability of the proxy server of the Zscaler Client Connector allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Zscaler Client Connector software proxy relates to the unlimited download of dangerous files. Exploiting this vulnerability can allow a hacker to bypass security restrictions and enhance their privileges by sending specially crafted requests...

Zscaler Client Connector 输入验证错误漏洞

Zscaler Client Connector is a lightweight agent from Zscaler, Inc. An input validation error vulnerability exists in Zscaler Client Connector, which stems from the vulnerability of URL parameters in the login process to injection attacks...

Zscaler Client Connector 跨站脚本漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and comply with the organization's policies, even when not on the corporate network. A security...

The vulnerability of the Zscaler Client Connector software is caused by a DLL hooking mechanism that allows a hacker to execute arbitrary code.

The vulnerability of the Zscaler Client Connector software is caused by a DLL hijacking. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Zscaler Client Connector Buffer Overflow Vulnerability

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization's internal applications is secure and compliant with the organization's policies, even when not on the corporate network.A security...

CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

Code injection

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11634

CVE-2020-11634 affects the Zscaler Client Connector for Windows prior to version 2.1.2.105. The vulnerability is a DLL hijacking issue arising from the OpenSSL configuration, enabling a local adversary to execute arbitrary code in the SYSTEM context. The affected component is the Windows client (...

CVE-2020-11632

The CVE-2020-11632 vulnerability affects Zscaler Client Connector prior to version 2.1.2.150. The root cause is failure to quote the search path for services, enabling a local attacker to execute code with SYSTEM privileges. Affected versions are pre-2.1.2.150; upgrade to 2.1.2.150 or newer (per ...

CVE-2020-11632

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

Zscaler Client Connector 代码问题漏洞

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A code...

Zscaler Client Connector 代码问题漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...