CVE-2023-41969

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-41969
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023
Configurations

No configuration.

History

21 Nov 2024, 08:22

Type Values Removed Values Added
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 -

17 Oct 2024, 15:15

Type Values Removed Values Added
Summary (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later. (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.
CWE CWE-59 CWE-61

26 Mar 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-26 15:15

Updated : 2024-11-21 08:22

NVD link : CVE-2023-41969

Mitre link : CVE-2023-41969

CVE.ORG link : CVE-2023-41969

JSON object : View

Products Affected

No product.

CWE
CWE-61

UNIX Symbolic Link (Symlink) Following