CVE-2024-23458: Local Privilege Escalation on Zscaler Client Connector on Windows
Published Aug 6, 2024
·Updated
While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.
Affected Software
1 affected component
Zscaler Client Connector Windows<4.2.0.190
Event History
Aug 6, 2024
CVE Published
via MITRE·03:22 PM
Data Sourced
via MITRE·03:22 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-23458?
The severity of CVE-2024-23458 is high due to its potential for local privilege escalation.
2
How do I fix CVE-2024-23458?
To fix CVE-2024-23458, upgrade Zscaler Client Connector to version 4.2.0.190 or later.
3
What systems are affected by CVE-2024-23458?
CVE-2024-23458 affects Zscaler Client Connector on Windows versions prior to 4.2.0.190.
4
What type of vulnerability is CVE-2024-23458?
CVE-2024-23458 is a local privilege escalation vulnerability.
5
Is CVE-2024-23458 being actively exploited?
There is no public information indicating that CVE-2024-23458 is actively being exploited in the wild.