7.3
CVE-2024-31127
- EPSS 0.09%
- Veröffentlicht 04.06.2025 04:45:07
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle cve@zscaler.com
- CVE-Watchlists
- Unerledigt
MacOS Zscaler Client Connector Local Privilege Escalation
An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their privileges.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerZscaler
≫
Produkt
Client Connector
Default Statusunaffected
Version
0
Version <
4.2.0.241
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.007 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cve@zscaler.com | 7.3 | 1.8 | 5.5 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
|
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.
https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2023?applicable_category=macOS&applicable_version=4.2&deployment_date=2023-12-14