Lucene search

K
nvd[email protected]NVD:CVE-2023-41970
HistoryMay 02, 2024 - 1:23 p.m.

CVE-2023-41970

2024-05-0213:23:06
CWE-354
web.nvd.nist.gov
vulnerability
zscaler client connector
windows
integrity check
local execution of code
repair app functionality
cve-2023-41970

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

0.0004 Low

EPSS

Percentile

9.1%

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.

6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2023-41970