CVE-2024-23456

概要

参考情報

• help.zscaler.com/client-connector/client-connector-app-release-summary-2023 · Vendor Advisory

client connector のその他の脆弱性

• CVE-2026-22569中 5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from be…
• CVE-2024-23483緊急 9.8An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Clie…
• CVE-2024-23464中 4.9In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connec…
• CVE-2024-23460高 7.8The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally…
• CVE-2024-23458高 7.8While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading…