Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in ZScaler Client Connector ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren oder seine Berechtigungen zu erweitern.
Product
Zscaler Client Connector, ehemals Zscaler App (Z App) führt Sicherheits- und Richtlinienkontrollen auf verwalteten Endgeräten durch.
Vulnerabilities 4
-
High 7.3
ZSATrayManager Arbitrary File Deletion
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.
-
High 7.3
Revert password check incorrect type validation
In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later.
-
High 7.3
Lack of input santization on Zscaler Client Connector enables arbitrary code execution
ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later.
-
High 7.0
ZScalerService Local Privilege Escalation
The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later.
Revision history
-
#3
CPE Zuordnungen korrigiert
-
#2
Prüfung Produkteintragung
-
#1
Initiale Fassung
References
-
Zscaler Security Advisory vom 2024-03-26
https://trust.zscaler.com/zscaler.net/posts/18226
-
GitHub Advisory database GHSA-vw2x-qjjw-279v
https://github.com/advisories/GHSA-vw2x-qjjw-279v
-
GitHub Advisory database GHSA-9q9g-6mgq-4cf7
https://github.com/advisories/GHSA-9q9g-6mgq-4cf7
-
GitHub Advisory database
https://github.com/advisories/GHSA-vrpp-jrqv-4gj2
-
GitHub Advisory database
https://github.com/advisories/GHSA-jpgh-f7hm-pwmf