CVE-2024-23460

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2

Description The issue arises from the Zscaler Updater process not validating the digital signature of the installer before execution. This allows arbitrary code to be locally executed.

Recommendations For versions prior to 4.2, update to version 4.2 or later to resolve the issue. As a temporary workaround, consider disabling the Zscaler Updater process until a patch is available. Restrict access to the installer to minimize the risk of exploitation.