exploitDog

CVE-2024-23461

Опубликовано: 02 мая 2024

Источник: nvd

CVSS3: 4.2

CVSS3: 5.5

EPSS Низкий

Описание

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4.

Ссылки

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021?applicable_category=macos&applicable_version=3.4
Release Notes
Vendor Advisory
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021?applicable_category=macos&applicable_version=3.4
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:macos:*:*

Версия до 3.4 (исключая)

EPSS

Процентиль: 2%

0.0011

Низкий

4.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-354

Связанные уязвимости

GHSA-276f-6jm7-647m

CVSS3: 4.2

github

около 2 лет назад

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4.

EPSS

Процентиль: 2%

0.0011

Низкий

4.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-354