Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Zscaler Client Connector 3.7 Clear all filters
TI-2024-15505 CVE-2024-23459 · GHSA-9gh8-72qr-qfc7

Multiple Arbitrary Creates/Overwrites by link following

Priority MEDIUM 43

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00474 Published 2024-05-02 Fixed in 3.7 CWE-59
TI-2023-22354 CVE-2023-41971 · GHSA-h695-7mxq-qwxc

Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

Priority LOW 33

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2024-05-02 Fixed in 3.7 CWE-59