CVEvulnerability
CVE-2023-41970
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.0 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-354
Description
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.
Affected configurations
• zscaler client connector (< 4.1.0.62)
Related
Weakness · CWE (1)
- CWE-354 Improper Validation of Integrity Check Value weakness
References
- https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=windows&applicable_version=4.1 Release Notes, Vendor Advisory
- https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=windows&applicable_version=4.1 Release Notes, Vendor Advisory