CVE-2021-26736 — ZApp Installer Privilege Escalation Vulnerabilities

CVE-2021-26736

ZApp Installer Privilege Escalation Vulnerabilities PUBLISHED

Description (CNA)

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 3.6

CWE

CWE-20

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021

CISA-ADP

No English description supplied.

No references supplied.