CVE-2021-26735
23.10.2023, 14:15
The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges.Enginsight
| Vendor | Product | Version |
|---|---|---|
| zscaler | client_connector | 𝑥 < 3.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-346 - Origin Validation ErrorThe software does not properly verify that the source of data or communication is valid.
- CWE-428 - Unquoted Search Path or ElementThe product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.