CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

CVE-2020-11633

The CVE refers to Zscaler Client Connector for Windows prior to version 2.1.2.74, which is affected by a stack-based buffer overflow when connecting to misconfigured TLS servers. Root cause: improper handling of TLS server responses leading to potential arbitrary code execution with system privil...

Zscaler Client Connector 缓冲区错误漏洞

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization's internal applications is secure and compliant with the organization's policies, even when not on the corporate network.A security...

Zscaler Client Connector 代码问题漏洞

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

PT-2021-3987

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 2.1.2.105 Description The issue is caused by a DLL hijacking vulnerability due to the configuration of OpenSSL. This may allow a local adversary to execute arbitrary code in the SYSTEM context...

Zscaler Client Connector 代码问题漏洞

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A code...

CVE-2020-11632: Unquoted Search Path or Element

The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which allows a local adversary to execute code with system privileges...

CVE-2020-11634: Uncontrolled Search Path Element

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...

PT-2021-9422

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 2.1.2.150 Description The issue allows a local adversary to execute code with system privileges due to the Zscaler Client Connector not quoting the search path for services. Recommendations For versio...

CVE-2020-11633: Out-of-bounds Write

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

PT-2021-9423

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector for Windows versions prior to 2.1.2.74 Description The issue is related to a stack-based buffer overflow that occurs when connecting to misconfigured TLS servers. This could potentially allow an adversary to execute...

CVE-2020-11635

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges...

CVE-2020-11635

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges...

Code injection

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges...

CVE-2020-11635

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges...

CVE-2020-11635

CVE-2020-11635 affects Zscaler Client Connector prior to 3.1.0. The issue is insufficient validation of RPC clients, allowing a local adversary to execute code with system privileges or perform privileged actions. Affected component is the client connector’s RPC handling; impact is described as c...

PT-2021-9424

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 3.1.0 Description The issue allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges due to insufficient validation of RPC...

Zscaler Client Connector Security Vulnerability

A security vulnerability exists in the Zscaler Client Connector prior to 3.1.0 that allows local users to execute code with system privileges or perform limited actions for which they do not have privileges...

CVE-2020-11635: Undefined Security Weakness

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges...

Joker Trojans Flood the Android Ecosystem

More variants of the Joker Android malware are cropping up in Google Play as well as third-party app stores, in a trend that researchers say points to a relentless targeting of the Android mobile platform. Researchers at Zscaler have found 17 different samples of Joker being regularly uploaded to...