CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-23483

Local Privilege Escalation via lack of input validation

Status: Published
Published: 2024-08-06
Updated: 2024-08-06
Assigning organization: Zscaler

Description

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 4.2affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2 ↗