Vulnerabilities

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering.

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation.

Anti-tampering can be disabled under certain conditions without signature validation.