Fortra Digital Guardian Agent Uninstaller Cross Site Scripting / UninstallKey Cached

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Uninstall Key Caching product: Fortra Digital Guardian Agent Uninstaller Data Loss Prevention vulnerable version: Agent: 7.9.4 fixed version: Agent: 7.9.4 CVE number:...

CVE-2023-6253

CVE-2023-6253 affects Digital Guardian Agent prior to version 7.9.4, where an encryption/uninstall key is stored in the uninstaller. A local attacker can retrieve the uninstall key from memory of the uninstaller file and use it to remove the software. Affected component: Agent Uninstaller; root c...

CVE-2023-6253 Saved Uninstall Key in Digital Guardian Agent Uninstaller

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...