CVE-2024-23483CWE-20

Local Privilege Escalation via lack of input validation

High · published August 6, 2024

CVSS v3.1
7.0
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00748 · 54.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-08-06T15:30Z
EPSS history
Timeline
  • 06 AUG 15:30Z
    Local Privilege Escalation via lack of input validation
    cvelistv5