what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Fortra Digital Guardian Agent Uninstaller Cross Site Scripting / UninstallKey Cached

Posted Nov 28, 2023

Authored by Johannes Kruchem, Daniel Hirschberger, Bernhard Grundling | Site sec-consult.com

The uninstaller in Fortra Digital Guardian Agent versions prior to 7.9.4 suffers from a cross site scripting vulnerability. Additionally, the Agent Uninstaller handles sensitive data insecurely and caches the Uninstall key in memory. This key can be used to stop or uninstall the application. This allows a locally authenticated attacker with administrative privileges to disable the application temporarily or even remove the application from the system completely.

tags | exploit, xss

advisories | CVE-2023-6253

SHA-256 | d393eda92218fb28d4719259401d1db3e0731edb5b930170f2f951494d02fbc7

Download | Favorite | View

Related Files

No related files