CVE-2023-41969

An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.
Configurations

Configuration 1 (hide)

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*

History

10 Oct 2025, 15:04

Type Values Removed Values Added
First Time Zscaler client Connector
Zscaler
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - Release Notes
CWE NVD-CWE-Other
CPE cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*

21 Nov 2024, 08:22

Type Values Removed Values Added
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 -

17 Oct 2024, 15:15

Type Values Removed Values Added
Summary (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later. (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.
CWE CWE-59 CWE-61

26 Mar 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-26 15:15

Updated : 2025-10-10 15:04


NVD link : CVE-2023-41969

Mitre link : CVE-2023-41969

CVE.ORG link : CVE-2023-41969


JSON object : View

Products Affected

zscaler

  • client_connector
CWE
CWE-61

UNIX Symbolic Link (Symlink) Following

NVD-CWE-Other