CVE-2021-26737 Privilege Escalation Using PID Reuse in ZCC macOS

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

CVE-2021-26737 Privilege Escalation Using PID Reuse in ZCC macOS

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition...

CVE-2021-26737

CVE-2021-26737 affects the Zscaler Client Connector for macOS prior to 3.6. The vulnerability arises from insufficient validation of RPC clients, allowing a local attacker with LOW privileges to exploit a race condition to shutdown the Zscaler tunnel (availability impact). The root cause is a rac...

CVE-2021-26736 ZApp Installer Privilege Escalation Vulnerabilities

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges...

CVE-2021-26736

CVE-2021-26736 concerns Zscaler Client Connector Installer and Uninstaller for Windows prior to version 3.6. The vulnerability allows a local attacker to execute binaries from a low-privilege path, potentially gaining SYSTEM privileges. Affected component: the Windows installer/uninstaller. Root ...

CVE-2021-26735 Untrusted Search Path While Executing REG DELETE by Uninstaller

The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges...

CVE-2021-26735

The CVE-2021-26735 issue affects Zscaler Client Connector Installer and Uninstallers for Windows prior to version 3.6. The root cause is an unquoted search path vulnerability in the installer/uninstaller executables, enabling a local attacker to execute code with SYSTEM privileges. Impact is exec...

CVE-2021-26734 Junction Delete leading to elevation of privilege

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context...

CVE-2021-26734

Affected software: Zscaler Client Connector Installer on Windows

CVE-2021-26734 Junction Delete leading to elevation of privilege

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context...

DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan

The threat actor known as DoNot Team has been linked to the use of a novel .NET-based backdoor called Firebird targeting a handful of victims in Pakistan and Afghanistan. Cybersecurity company Kaspersky, which disclosed the findings in its APT trends report Q3 2023, said the attack chains are als...

PT-2023-21971 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector for Linux versions prior to 1.3.1.6 Description: The issue is related to an Origin Validation Error vulnerability in Zscaler Client Connector on Linux, which allows the inclusion of code in an existing process...

Zscaler Client Connector Security Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector Buffer Error Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector Data Forgery Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector Security Vulnerability

Zscaler Client Connector is an application from zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A security...

Zscaler Client Connector Data Forgery Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...

Zscaler Client Connector Path Traversal Vulnerability

Zscaler Client Connector is an application for zscaler. An application installed on a device that ensures that Internet traffic and access to an organization's internal applications is secure and complies with the organization's policies, even when not on the corporate network. ecto is a toolkit...

Zscaler Client Connector Security Vulnerability

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and comply with the organization's policies, even when not on the corporate network. A security...

PT-2023-12107 · Zscaler · Zscaler Client Connector Installer

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector Installer on Windows versions prior to 3.4.0.124 Description: The issue arises from the improper handling of directory junctions during the uninstallation process of the Zscaler Client Connector Installer on Windows...