Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7x29-jh5v-6wwf

Опубликовано: 23 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition.

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition.

EPSS

Процентиль: 4%
0.00019
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 5.5
nvd
больше 2 лет назад

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition.

EPSS

Процентиль: 4%
0.00019
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-346