CVE-2023-28794

MEDIUM

Zscaler Client Connector <1.3.1.6 - Privilege Escalation

Title source: llm

Description

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

References (1)

[Release Notes] https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19

Scores

CVSS v3 4.3

EPSS 0.0007

EPSS Percentile 20.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE

CWE-346

Status published

Affected Products (1)

zscaler/client_connector < 1.3.1.6

Timeline

Published Nov 06, 2023

Tracked Since Feb 18, 2026