CVE Database · CVE-2024-23460
CVSS v3.1
6.4
EPSS
0.13%
Published
Aug 6, 2024
Modified
Aug 7, 2024
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS <4.2.
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:NWeaknesses (CWE)
Affected Products (1)
References (1)