Design/Logic Flaw

2023-10-2314:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

windows

privilege escalation

adversary

code execution

nvd

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

JSON

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges.

CPENameOperatorVersion
client_connectorlt3.6

CPE	Name	Operator	Version
	client_connector	lt	3.6

References

help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021