CVE-2020-11635: 
Zscaler Client Connector vulnerability analysis and mitigation

The Zscaler Client Connector prior to version 3.1.0 contained a security vulnerability identified as CVE-2020-11635. The vulnerability was related to insufficient validation of RPC clients, which could allow local adversaries to execute code with system privileges or perform unauthorized actions (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially impacting confidentiality, integrity, and availability at high levels (NVD).

If exploited, this vulnerability could allow an attacker to execute code with system privileges or perform actions for which they did not have proper authorization. The high CVSS score reflects the significant potential impact on system security (NVD).

The vulnerability requires local access to the system and low privileges to exploit. The attack complexity is rated as low, indicating that the vulnerability is relatively straightforward to exploit if an attacker has the necessary local access (NVD).

The vulnerability has been addressed in Zscaler Client Connector version 3.1.0 and later. Users should upgrade to this version or newer to mitigate the vulnerability (NVD, Vendor Advisory).