EUVD-2019-7837

Malware in sbrugna...

EUVD-2019-7836

Malware in sbrugna...

CVE-2019-17445

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

CVE-2019-17446

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...

CVE-2019-17445

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

CVE-2019-17446

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...

CVE-2019-17446

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...

CVE-2019-17445

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

Path traversal

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...

Code injection

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

CVE-2019-17446

The CVE-2019-17446 issue affects Eracent EPA Agent up to version 10.2.26. The agent executable, when installed for non-root operations (scanning), can start external programs with elevated permissions due to an Untrusted Search Path. This is supported by multiple sources in connected documents (R...

CVE-2019-17446

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...

CVE-2019-17445

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

CVE-2019-17445

CVE-2019-17445 affects Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent up to 10.2.26. The issue arises when the agent runs for non-root scanning operations and can be forced to copy files from the filesystem to other locations via Symbolic Link Following. Connected documents confirm the vulnerabil...

PT-2019-15157

Name of the Vulnerable Software and Affected Versions Eracent EPA Agent versions prior to 10.2.27 Description An issue was discovered in the agent executable of Eracent EPA Agent. When installed for non-root operations, such as scanning, it can be used to start external programs with elevated...

PT-2019-15156

Name of the Vulnerable Software and Affected Versions Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent versions prior to 10.2.27 Description An issue was discovered where the agent executable can be forced to copy files from the filesystem to other locations via Symbolic Link Following when install...

CVE-2019-17445: Improper Link Resolution Before File Access

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be forced to copy files from the filesystem to other locations via Symbolic Link Following...

CVE-2019-17446: Untrusted Search Path

An issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when installed for non-root operations scanning, can be used to start external programs with elevated permissions because of an Untrusted Search Path...