Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-23458

Local Privilege Escalation on Zscaler Client Connector on Windows

Description

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 4.2.0.190affected

References