CVE-2021-26738

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...

CVE-2021-26738 Privilege Escalation for ZCC macOS via PATH Variable

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges...

CVE-2021-26738

CVE-2021-26738 affects Zscaler Client Connector for macOS prior to 3.7. It is an unquoted search path vulnerability via the PATH variable, enabling a local attacker to execute code with root privileges. Documented impact is privileged code execution (local, with LOW user interaction). The CVE ent...