CVE-2024-23459

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_version=3.7
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_version=3.7

Configurations

No configuration.

History

21 Nov 2024, 08:57

Type	Values Removed	Values Added
References	~~() https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_version=3.7 -~~	() https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_version=3.7 -
Summary		(es) Una vulnerabilidad de resolución de enlace incorrecta antes del acceso al archivo ("siguiente enlace") en Zscaler Client Connector en Mac permite sobrescribir un archivo del sistema. Este problema afecta a Zscaler Client Connector en Mac: versiones anteriores a 3.7.

02 May 2024, 13:27

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-02 13:23

Updated : 2024-11-21 08:57

NVD link : CVE-2024-23459

Mitre link : CVE-2024-23459

CVE.ORG link : CVE-2024-23459

JSON object : View

Products Affected

No product.

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

7.1 /10