Skip to content
OpenAdvisories
High · 7.5 CVE-2024-23480 EUVD-2024-20978GHSA-gvpq-95j2-mc36

Insecure MacOS code sign check fallback

Published May 1, 2024 · Updated Aug 1, 2024 · Assigned by Zscaler

Description

A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < 4.2 4.2

Advisories 1

References