CVE-2023-41970: Repair App local code execution with arbitrary privileges
Published May 2, 2024
·Updated
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.
Affected Software
2 affected components
Zscaler Client Connector<4.1.0.62
Zscaler Client Connector Windows<4.1.0.62
Event History
May 2, 2024
CVE Published
via MITRE·01:10 PM
Data Sourced
via MITRE·01:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:23 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-41970?
CVE-2023-41970 has a high severity due to its potential for local code execution.
2
How do I fix CVE-2023-41970?
To fix CVE-2023-41970, update Zscaler Client Connector for Windows to version 4.1.0.62 or later.
3
What specific functionality is affected by CVE-2023-41970?
CVE-2023-41970 affects the Repair App functionality in Zscaler Client Connector on Windows.
4
Which versions of Zscaler Client Connector are impacted by CVE-2023-41970?
Zscaler Client Connector versions before 4.1.0.62 are impacted by CVE-2023-41970.
5
What type of vulnerability is CVE-2023-41970?
CVE-2023-41970 is classified as an Improper Validation of Integrity Check Value vulnerability.