high7.0

CVE-2024-23483

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection.

Impact

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.

Affected products

Vendor	Product	Affected versions
Zscaler	Client Connector	before 4.2

Weakness classification

CWE-20 CWE-78

References

NVD record
CVE.org record
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2