CVE-2019-17445

CVE-2019-17445 affects Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent up to 10.2.26. The issue arises when the agent runs for non-root scanning operations and can be forced to copy files from the filesystem to other locations via Symbolic Link Following. Connected documents confirm the vulnerabil...

CVE-2019-17446

The CVE-2019-17446 issue affects Eracent EPA Agent up to version 10.2.26. The agent executable, when installed for non-root operations (scanning), can start external programs with elevated permissions due to an Untrusted Search Path. This is supported by multiple sources in connected documents (R...