CVE-2024-23464

概要

参考情報

• help.zscaler.com/client-connector/client-connector-app-release-summary-2023 · Vendor Advisory

client connector のその他の脆弱性

• CVE-2026-22569中 5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from be…
• CVE-2024-23483緊急 9.8An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Clie…
• CVE-2024-23460高 7.8The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally…
• CVE-2024-23458高 7.8While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading…
• CVE-2024-23456高 7.5Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector <4.2.0.190 with …