CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.

• CWE-922
• CWE-922

• http://packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Nov/14Exploit, Mailing List, Third Party Advisory
• https://r.sec-consult.com/fortraExploit, Third Party Advisory
• https://www.fortra.com/securityProduct
• http://packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/Nov/14Exploit, Mailing List, Third Party Advisory
• https://r.sec-consult.com/fortraExploit, Third Party Advisory
• https://www.fortra.com/securityProduct

Published

Nov 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6247The PKCS#7 parser in OpenVPN 3 Core Library versions through…6.5
• CVE-2023-6248The Syrus4 IoT gateway utilizes an unsecured MQTT server to …9.8
• CVE-2023-6249Signed to unsigned conversion esp32_ipm_send9.8
• CVE-2023-6250The BestWebSoft's Like & Share WordPress plugin before 2.74 …7.5
• CVE-2023-6251Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2…3.5
• CVE-2023-6252Path traversal vulnerability in Chalemelon Power framework, …7.5
• CVE-2023-6254A Vulnerability in OTRS AgentInterface and ExternalInterface…7.5
• CVE-2023-6255Use of Hard-coded Credentials vulnerability in Utarit Inform…7.5
• CVE-2023-6257The Inline Related Posts WordPress plugin before 3.6.0 is mi…4.3
• CVE-2023-6258A security vulnerability has been identified in the pkcs11-p…8.1
• CVE-2023-6259Insufficiently Protected Credentials, : Improper Access Cont…4.6
• CVE-2023-6260Improper Neutralization of Special Elements used in an OS Co…8.8