Vulnerability · Published Nov 22, 2023 · Assigned by SEC-VLab
CVE-2023-6253Saved Uninstall Key in Digital Guardian Agent Uninstaller
Medium 6.0
In plain English
A medium-severity security flaw in Digital Guardian Agent from Fortra. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS NVD)6.0Medium
Exploit odds (30 days)0.3%top 76.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortra | Digital Guardian Agent | 0 – before 7.9.4 |
Weakness: CWE-922