Client Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:linux:*:*
part: a version: * update: *
| Vendor | Zscaler (8b33ada7-550b-5f0e-9389-e0b74c251549) |
|---|---|
| Product | Client Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | linux |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3661 |
vulnerable | 2026-06-08 06:43:51.146456 |
DHCP routing options can manipulate interface-based VPN traffic
HIGH (7.6)
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Published: 2024-05-06T18:31:21.217Z
Updated: 2024-08-28T19:09:06.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28805 |
vulnerable | 2026-06-08 06:02:35.783271 |
ZCC on Linux privilege escalation
MEDIUM (6.7)
An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue affects Client Connector: before 1.4.0.105
Published: 2023-10-23T13:33:57.278Z
Updated: 2025-02-27T20:39:25.528Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28804 |
vulnerable | 2026-06-08 06:02:35.782786 |
Linux ZCC allows unsigned updates, allowing elevated Code Execution
HIGH (8.2)
An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105
Published: 2023-10-23T13:33:19.903Z
Updated: 2024-10-17T15:09:55.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28800 |
vulnerable | 2026-06-08 06:02:35.775702 |
Output encoding missing in redrurl parameter
HIGH (8.1)
When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login.
Published: 2023-06-22T19:15:55.258Z
Updated: 2024-12-06T15:13:35.280Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28799 |
vulnerable | 2026-06-08 06:02:35.765710 |
Details available
HIGH (8.2)
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.
Published: 2023-06-22T19:06:24.943Z
Updated: 2024-12-05T17:43:58.739Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28796 |
vulnerable | 2026-06-08 06:02:35.758044 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28795 |
vulnerable | 2026-06-08 06:02:35.757462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28794 |
vulnerable | 2026-06-08 06:02:35.756977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28793 |
vulnerable | 2026-06-08 06:02:35.756275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.