CVE-2021-26735 — Untrusted Search Path While Executing REG DELETE by Uninstaller

CVE-2021-26735

Untrusted Search Path While Executing REG DELETE by Uninstaller PUBLISHED

Description (CNA)

The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 3.6

CWE

CWE-346

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

CISA-ADP

No English description supplied.

No references supplied.