CVE-2024-23483 — Local Privilege Escalation via lack of input validation

CVE-2024-23483

Local Privilege Escalation via lack of input validation PUBLISHED

Description (CNA)

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 4.2

CWE

CWE-20

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.