CVE-2021-26734 — Junction Delete leading to elevation of privilege

CVE-2021-26734

Junction Delete leading to elevation of privilege PUBLISHED

Description (CNA)

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 3.4.0.124

CWE

CWE-269

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

CISA-ADP

No English description supplied.

No references supplied.