CVE-2023-41969CWE-61

ZSATrayManager Arbitrary File Deletion

High · published March 26, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.3th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2024-03-26T14:14Z
EPSS history
Timeline
  • 26 MAR 14:14Z
    ZSATrayManager Arbitrary File Deletion
    cvelistv5