CVE-2024-23461: ZCC macOS Upgrade ZIP Bomb DoS
Published May 2, 2024
·Updated
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4.
Affected Software
2 affected components
Zscaler Client Connector<3.4
Zscaler Client Connector Macos<3.4
Event History
May 2, 2024
CVE Published
via MITRE·01:11 PM
Data Sourced
via MITRE·01:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:23 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23461?
CVE-2024-23461 is classified as a high severity vulnerability due to its potential for local code execution.
2
How do I fix CVE-2024-23461?
To fix CVE-2024-23461, upgrade Zscaler Client Connector on MacOS to version 3.4 or later.
3
What software is affected by CVE-2024-23461?
CVE-2024-23461 affects Zscaler Client Connector on MacOS versions prior to 3.4.
4
What type of vulnerability is CVE-2024-23461?
CVE-2024-23461 is an Improper Validation of Integrity Check Value vulnerability.
5
Can CVE-2024-23461 be exploited remotely?
CVE-2024-23461 requires local access for exploitation, as it pertains to the upgrade process.