pentester.land· May 27, 2024· by Eugene Lim (@spaceraccoonsec), Winston Ho🔍 CVE-2023-41973

Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973)

Open Original Article ↗
Target Program: Zscaler
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Path traversal#Authentication bypass#Arbitrary file delete#DLL Hijacking#Local Privilege Escalation#Windows#CVE-2023-41973