Temporary Encrypted File Protection Against Unprivileged End User Access and Modification

CVE-2023-41969

What is CVE-2023-41969?

The vulnerability in ZSATrayManager allows for arbitrary file deletion, which compromises the protection mechanisms in place for the temporary encrypted ZApp issue reporting files. This flaw specifically permits unprivileged end users to access and modify these files, posing a risk to data integrity and confidentiality. The issue has been mitigated in ZApp version 4.3.0 and later, which addresses the unauthorized access vector, ensuring that the encrypted files are properly safeguarded from deletion by unauthorized users.

News Articles

Threat Intelligence Radar

CVE-2023-41969CVE-2023-41972

Threat Intel Roundup: glibc, Anatsa, iconv, NahamCon – Threat Radar Intelligence

admin May 28, 2024 No Comments Technical Summary Zero-Interaction Local Privilege Escalation in...

Vulcan Cyber

CVE-2023-41973CVE-2023-41969

Fix these critical vulnerabilities in Zscaler Client Connector

Critical vulnerabilities in Zscaler Client Connector allows privilege escalation to NT AUTHORITYSYSTEM. Here's what you need to know.

References