CVE-2023-41973: 
Zscaler Client Connector vulnerability analysis and mitigation

CVE-2023-41973 is a vulnerability in Zscaler Client Connector's ZSATray component where previousInstallerName is passed as a configuration parameter to TrayManager, which then constructs the path and appends previousInstallerName to get the full path of the exe. The vulnerability was discovered and disclosed in 2023, affecting Zscaler Client Connector application versions 4.2.1 and below. The issue was fixed in Win ZApp version 4.3.0.121 and later (Zscaler Help).

The vulnerability is classified as a path traversal issue (CWE-22: Improper Limitation of a Pathname to a Restricted Directory). According to the CVSS 3.1 scoring, it has received a base score of 7.3 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. This indicates that the vulnerability requires local access, low attack complexity, low privileges, and no user interaction, while potentially resulting in high impacts to confidentiality and integrity, and low impact to availability (NVD).

The vulnerability could allow an attacker to manipulate the path construction process when TrayManager appends the previousInstallerName to get the full path of the executable. This could potentially lead to unauthorized file access or execution of malicious files through path manipulation (ASEC).

The vulnerability requires local access to the system and low privileges to exploit. No public exploits have been identified in the wild at the time of reporting.

The vulnerability has been patched in Zscaler Client Connector Windows version 4.3.0.121 and later releases. Users of affected versions are strongly advised to upgrade to the latest version to address this security issue (Zscaler Help).