CVE-2023-41971 — Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control

CVE-2023-41971

Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control PUBLISHED

Description (CNA)

An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.

Affected (CNA)

Vendor / product	Versions
Zscaler / Client Connector	affected 0 before 3.7

CWE

CWE-59

References

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021??applicable_category=windows&applicable_version=3.7

ADP enrichment

CVE

No English description supplied.

https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021??applicable_category=windows&applicable_version=3.7

CISA-ADP

No English description supplied.

No references supplied.