Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Zscaler Client Connector 3.6 Clear all filters
TI-2021-08415 CVE-2021-26737 · GHSA-7x29-jh5v-6wwf

Privilege Escalation Using PID Reuse in ZCC macOS

Priority LOW 24

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00112 Published 2023-10-23 Fixed in 3.6 CWE-346
TI-2021-08414 CVE-2021-26736 · GHSA-cmfg-v75g-8wm3

ZApp Installer Privilege Escalation Vulnerabilities

Priority LOW 35

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2023-10-23 Fixed in 3.6 CWE-20