CVE-2023-28797 | BDVDB-2026-214819 Detail
ZscalerClient Connector
Description#
Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk. A malicious user can replace the folder and execute code as a privileged user.
Impact#
CAPEC-549 Local Execution of Code
Weaknesses#
- CWE-59 Improper Link Resolution Before File Access ('Link Following')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.