CVE-2021-26737

Publication date

2023-10-23 13:22:51

Family

Zscaler

State

PUBLISHED

Description

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition.