CVE-2024-23480CWE-347

Insecure MacOS code sign check fallback

High · published May 1, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-05-01T16:27Z
EPSS history
Timeline
  • 01 MAY 16:27Z
    Insecure MacOS code sign check fallback
    cvelistv5