CVE-2023-28804 Linux ZCC allows unsigned updates, allowing elevated Code Execution

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105...

CVE-2023-28804

The CVE-2023-28804 entry documents an improper verification of a cryptographic signature in Zscaler Client Connector on Linux, allowing an attacker to replace binaries. Affected product: Zscaler Client Connector for Linux, with vulnerable versions before 1.4.0.105. The issue enables binary replac...

CVE-2023-28803 Traffic being bypassed by ZCC by configuring synthetic IP range as local network

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9...

CVE-2023-28803

CVE-2023-28803 (Zscaler Client Connector, Windows) affects Zscaler Client Connector versions prior to 3.9. The issue is an authentication bypass via spoofing of a device with a synthetic IP address, enabling a functionality bypass. Connected sources specify the affected product and version range,...

CVE-2023-28803 Traffic being bypassed by ZCC by configuring synthetic IP range as local network

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9...

CVE-2023-28797

CVE-2023-28797 affects Zscaler Client Connector for Windows prior to version 4.1. The vulnerability arises from how the client writes/deletes a configuration file inside specific folders on disk, allowing a local attacker to replace the folder and execute code with elevated privileges. Impact is ...

CVE-2023-28797 LPE using arbitrary file delete with Symlinks

Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user...

CVE-2023-28797 LPE using arbitrary file delete with Symlinks

Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user...

CVE-2023-28796 IPC Bypass Through PLT Section in ELF

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28796 IPC Bypass Through PLT Section in ELF

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28796

CVE-2023-28796 affects Zscaler Client Connector for Linux prior to 1.3.1.6. The issue is an improper verification of the cryptographic signature that allows code injection. Impact is described as high confidentiality/integrity/availability concerns, with local attack vector and no user interactio...

CVE-2023-28795 Client IPC validation bypass

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28795

CVE-2023-28795 concerns Zscaler Client Connector for Linux prior to 1.3.1.6. The issue is described as an Origin Validation Error that allows inclusion of code in an existing process. Affected software is Zscaler Client Connector for Linux; root cause details indicate a failure in validating the ...

CVE-2023-28795 Client IPC validation bypass

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28793 Heap Based Buffer Overflow in Library

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28793 Heap Based Buffer Overflow in Library

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6...

CVE-2023-28793

CVE-2023-28793: A heap-based buffer overflow in the signelf library used by Zscaler Client Connector for Linux allows code injection. Affected: Zscaler Client Connector for Linux prior to 1.3.1.6. Exploitation requires local access (local vector) with low privileges. Root cause: overflow in signe...

CVE-2021-26738 Privilege Escalation for ZCC macOS via PATH Variable

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...

CVE-2021-26738 Privilege Escalation for ZCC macOS via PATH Variable

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...

CVE-2021-26738

CVE-2021-26738 affects Zscaler Client Connector for macOS prior to 3.7. It is an unquoted search path vulnerability via the PATH variable, enabling a local attacker to execute code with root privileges. Documented impact is privileged code execution (local, with LOW user interaction). The CVE ent...