CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-23480

Insecure MacOS code sign check fallback

Status: Published
Published: 2024-05-01
Updated: 2024-08-01
Assigning organization: Zscaler

Description

A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 4.2affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2 ↗