Client Connector
Approved changes feed: RSS · Atom
cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:macos:*:*
part: a version: * update: *
| Vendor | Zscaler (8b33ada7-550b-5f0e-9389-e0b74c251549) |
|---|---|
| Product | Client Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | macos |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3661 |
vulnerable | 2026-06-08 06:43:51.147400 |
DHCP routing options can manipulate interface-based VPN traffic
HIGH (7.6)
DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.
Published: 2024-05-06T18:31:21.217Z
Updated: 2024-08-28T19:09:06.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23483 |
vulnerable | 2026-06-08 06:29:39.784206 |
Local Privilege Escalation via lack of input validation
HIGH (7)
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.
Published: 2024-08-06T15:30:51.851Z
Updated: 2024-08-06T18:08:53.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23482 |
vulnerable | 2026-06-08 06:29:39.783757 |
ZScalerService Local Privilege Escalation
HIGH (7)
The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later.
Published: 2024-03-26T14:23:20.100Z
Updated: 2024-08-05T14:40:13.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23480 |
vulnerable | 2026-06-08 06:29:39.783397 |
Insecure MacOS code sign check fallback
HIGH (7.5)
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
Published: 2024-05-01T16:27:35.730Z
Updated: 2024-08-01T23:06:24.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23462 |
vulnerable | 2026-06-08 06:29:39.771940 |
ZCC Mac validinstaller file integrity check missing
LOW (3.3)
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4.
Published: 2024-05-02T13:11:38.955Z
Updated: 2024-08-01T23:06:24.159Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23461 |
vulnerable | 2026-06-08 06:29:39.771490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23460 |
vulnerable | 2026-06-08 06:29:39.770790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23459 |
vulnerable | 2026-06-08 06:29:39.770325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28800 |
vulnerable | 2026-06-08 06:02:35.776147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28799 |
vulnerable | 2026-06-08 06:02:35.774613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28798 |
vulnerable | 2026-06-08 06:02:35.764946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26738 |
vulnerable | 2026-06-08 05:30:45.197356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26737 |
vulnerable | 2026-06-08 05:30:45.196852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.