Lucene search

K
nvd[email protected]NVD:CVE-2024-23459
HistoryMay 02, 2024 - 1:23 p.m.

CVE-2024-23459

2024-05-0213:23:06
CWE-59
web.nvd.nist.gov
2
cve-2024-23459
zscaler
client connector
mac
vulnerability
file overwrite
link following

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0

Percentile

9.0%

An Improper Link Resolution Before File Access (β€˜Link Following’) vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-23459