Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mr4g-jrgx-66c6

Опубликовано: 06 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.

EPSS

Процентиль: 12%
0.0004
Низкий

7.3 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 7.3
nvd
больше 1 года назад

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.

EPSS

Процентиль: 12%
0.0004
Низкий

7.3 High

CVSS3

Дефекты

CWE-346