CVE-2024-23460

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...

CVE-2024-23460

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...

CVE-2024-23460 Incorrect signature validation of package

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...

CVE-2024-23460

The CVE-2024-23460 issue is that the Zscaler Updater process does not validate the digital signature of the installer before execution, enabling arbitrary code to run locally. Affected software: Zscaler Client Connector on macOS versions earlier than 4.2. Root cause: lack of installer signature v...