VULNERABILITY INTELLIGENCE

CVE-2024-23458

CVSS score7.3 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2024-08-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Description

While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190.

Weakness classification

  • cve@zscaler.com: CWE-346
  • nvd@nist.gov: CWE-346

Primary references