CVE-2024-23480 — Insecure MacOS code sign check fallback

CVE-2024-23480

Insecure MacOS code sign check fallback PUBLISHED

Description (CNA)

A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 4.2

CWE

CWE-347

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2