Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-23461 EUVD-2024-20959GHSA-276f-6jm7-647m

ZCC macOS Upgrade ZIP Bomb DoS

Published May 2, 2024 · Updated Aug 1, 2024 · Assigned by Zscaler

Description

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4.

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < 3.4 3.4

Advisories 1

References