CVE-2023-41971: Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

Status

Published

2024-05-02

Updated

2024-08-06

Assigning organization

Zscaler

Description

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 3.7affected

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021??applicable_category=windows&applicable_version=3.7 ↗