Medium severity5.5NVD Advisory· Published Nov 22, 2019· Updated Jun 17, 2026

CVE-2019-17445

Description

An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be forced to copy files from the filesystem to other locations via Symbolic Link Following.

Affected products

Eracent/Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agentllm-create
Range: <=10.2.26
Eracent/EDA, EPA, EPM, EUA, FLW, and SUM Agentdescription
Eracent/Eda Agent
cpe:2.3:a:eracent:eda_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26
Eracent/Epa Agent
cpe:2.3:a:eracent:epa_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26
Eracent/Epm Agent
cpe:2.3:a:eracent:epm_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26
Eracent/Eua Agent
cpe:2.3:a:eracent:eua_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26
Eracent/Flw Agent
cpe:2.3:a:eracent:flw_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26
Eracent/Sum Agent
cpe:2.3:a:eracent:sum_agent:*:*:*:*:*:*:*:*
Range: <=10.2.26

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-17445

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions