Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-23460

Incorrect signature validation of package

Description

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS <4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 4.2affected

References