CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-11634

The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.6%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.9

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105

Products affected by CVE-2020-11634

Zscaler » Client Connector » Version: N/A

cpe:2.3:a:zscaler:client_connector:-
Zscaler » Client Connector » Version: 2.1

cpe:2.3:a:zscaler:client_connector:2.1
Zscaler » Client Connector » Version: 2.1.2

cpe:2.3:a:zscaler:client_connector:2.1.2
Zscaler » Client Connector » Version: 2.1.2.81

cpe:2.3:a:zscaler:client_connector:2.1.2.81

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-11634

Products

Pricing

Contact Us