Zscaler Client Connector vulnerabilities

42 known vulnerabilities affecting zscaler/client_connector.

Total CVEs

42

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL6HIGH24MEDIUM12

Vulnerabilities

Page 3 of 3

CVE-2020-11634HIGHCVSS 7.8fixed in 2.1.2.1052021-07-15

CVE-2020-11634 [HIGH] CWE-427 CVE-2020-11634: The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context.

CVE-2020-11635HIGHCVSS 7.8fixed in 3.1.02021-02-16

CVE-2020-11635 [HIGH] CVE-2020-11635: The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges.

← Previous3 / 3