CVE-2023-41970

MEDIUM

6.0

Beschreibung

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.

CVE Details

CVSS v3.1 Bewertung6.0

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht5/2/2024

Zuletzt geandert2/19/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

zscaler:client_connector

Schwachen (CWE)

CWE-354

Referenzen

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=windows&applicable_version=4.1(cve@zscaler.com)

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=windows&applicable_version=4.1(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.