← back
CVE-2023-6253

Saved Uninstall Key in Digital Guardian Agent Uninstaller

EPSS 0.3%CWE-922
A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.
Affected products
Fortra · Digital Guardian Agent

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.htmlhttp://seclists.org/fulldisclosure/2023/Nov/14https://r.sec-consult.com/fortrahttps://www.fortra.com/security