CVE-2023-41965

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-921 CWE-922

Affected software

No affected versions have been published.

Timeline

Published: Sep 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-419668.8The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileges by sending a HTTP PO CVE-2023-419674.6Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of t CVE-2023-419685.5This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watc CVE-2023-419697.1An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end u CVE-2023-41978.8Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, a CVE-2023-419707.8An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may CVE-2023-419717.8An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file CVE-2023-419727.8In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed V CVE-2023-419737.8ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInsta CVE-2023-419747.8A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.CVE-2023-419754.3This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.CVE-2023-419768.8A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.