CVE-2020-11491: Zevenet Zen Load Balancer

Medium severity, CVSS 4.9. EPSS: 7.9% chance of exploitation in the next 30 days.

Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attacks, as demonstrated by a filelog=/etc/shadow request to index.cgi.

Affected products

• Zevenet Zen Load Balancer: version 3.10.1 only

Published 2020-04-02. Last modified 2026-06-17.