Product:
Zscaler Client Connector
Summary
A health check port on Zscaler Client Connector on Windows, under specific circumstances, was not released after use. This allowed traffic to potentially bypass ZCC forwarding controls. The issue affects certain versions of the product, leading to potential security vulnerabilities.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.2 | CVE-2025-54983 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the affected system. By manipulating the health check port, the attacker could potentially redirect traffic, bypassing the intended forwarding controls of the Zscaler Client Connector. This could lead to unauthorized access to sensitive data or systems.
Affected Products
- Zscaler Client Connector versions 4.6 (up to 4.6.0.216) – Vulnerable to traffic bypass under specific conditions.
- Zscaler Client Connector versions 4.7 (up to 4.7.0.47) – Similar vulnerability allowing traffic to bypass forwarding controls.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Zscaler Client Connector that addresses this issue. Regularly updating software and monitoring for security patches can help prevent exploitation of this and similar vulnerabilities.