Skip to content
OpenAdvisories
Unscored CVE-2020-11635 EUVD-2020-3980GHSA-6xqj-rg38-r6rr

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with …

Published Feb 16, 2021 · Updated Aug 4, 2024 · Assigned by Zscaler

Description

The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which allows a local adversary to execute code with system privileges or perform limited actions for which they did not have privileges.

Affected products

VendorProductAffectedFixed
— Zscaler Client Connector for Windows < 3.1.0 —

References