Vulnerability Details CVE-2023-6253
A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.3%
CVSS Severity
CVSS v3 Score 6.0
References
- http://packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.html
- http://seclists.org/fulldisclosure/2023/Nov/14
- https://r.sec-consult.com/fortra
- https://www.fortra.com/security
- http://packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.html
- http://seclists.org/fulldisclosure/2023/Nov/14
- https://r.sec-consult.com/fortra
- https://www.fortra.com/security
Products affected by CVE-2023-6253
-
cpe:2.3:a:fortra:digital_guardian_agent:-