Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Zscaler Client Connector 1.3.1.6 Clear all filters
TI-2023-13306 CVE-2023-28796 · GHSA-4pxq-qc65-2pqq

IPC Bypass Through PLT Section in ELF

Priority LOW 33

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2023-10-23 Fixed in 1.3.1.6 CWE-94
TI-2023-13305 CVE-2023-28795 · GHSA-wwff-qqfj-cv2g

Client IPC validation bypass

Priority LOW 35

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0015 Published 2023-10-23 Fixed in 1.3.1.6 CWE-346
TI-2023-13303 CVE-2023-28793 · GHSA-g99m-655w-j95w

Heap Based Buffer Overflow in Library

Priority LOW 36

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2023-10-23 Fixed in 1.3.1.6 CWE-94