CVE-2024-23483

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 6, 2024

Updated: Aug 7, 2024

CWE ID 78

CWE ID 20

Summary

CVE-2024-23483 is an Input Validation vulnerability affecting the Zscaler Client Connector on MacOS versions below 4.2. Hackers can exploit this weakness to inject OS commands, potentially gaining unauthorized system access and control. This issue poses a serious risk for MacOS users running outdated versions of the Zscaler Client Connector software. It is recommended that users upgrade to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Zscaler Client Connector

Affected Vendors

Zscaler

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/xhvAsr
https://www.cve.org/CVERecord?id=CVE-2024-23483
https://nvd.nist.gov/vuln/detail/CVE-2024-23483

Back to Vulnerability Database