CVE-2023-41970

Repair App local code execution with arbitrary privileges

State: Published
Severity: 6.0 Medium
Published: May 2, 2024
Updated: Aug 2, 2024
Reserved: Sep 6, 2023

Description

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.

Scores

CVSS	Score	Vector	Source
3.1	6.0 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L	Zscaler

Weaknesses

CWE-354 Improper Validation of Integrity Check Value

Affected Products

Product	Versions
Client ConnectorZscaler	before 4.1.0.62Affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=windows&applicable_version=4.1

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.