← back
CVE-2023-41972

Revert password check incorrect type validation

CVSS 7.3 HIGHEPSS 0.2%CWE-280
In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Affected products
Zscaler · Client Connector

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.3.0.121&deployment_date=2023-09-01&id=1463196