Lucene search

K
nvd[email protected]NVD:CVE-2023-41970
HistoryMay 02, 2024 - 1:23 p.m.

CVE-2023-41970

2024-05-0213:23:06
CWE-354
web.nvd.nist.gov
2
vulnerability
zscaler client connector
windows
integrity check
local execution of code
repair app functionality
cve-2023-41970

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS

0

Percentile

9.0%

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.

CVSS3

6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-41970