CVE-2023-41969

A

n arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.

Configurations

Configuration 1 (hide)

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*

History

10 Oct 2025, 15:04

Type Values Removed Values Added
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - Release Notes
CWE NVD-CWE-Other
First Time Zscaler client Connector
Zscaler
CPE cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*

21 Nov 2024, 08:22

Type Values Removed Values Added
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023 -

17 Oct 2024, 15:15

Type Values Removed Values Added
CWE CWE-59 CWE-61
Summary (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later. (en) An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.

Information

Published : 2024-03-26 15:15

Updated : 2025-10-10 15:04


NVD link : CVE-2023-41969

Mitre link : CVE-2023-41969

CVE.ORG link : CVE-2023-41969


JSON object : View

Products Affected
CWE
CWE-61

UNIX Symbolic Link (Symlink) Following

NVD-CWE-Other