Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2021-26734

Junction Delete leading to elevation of privilege

Description

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 3.4.0.124affected

References