Medium severity6.0NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026

CVE-2023-6253

Description

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortra/Digital Guardian Agent
cpe:2.3:a:fortra:digital_guardian_agent:*:*:*:*:*:*:*:*
Range: <7.9.4
Digital Guardian/Agentllm-create
Range: <7.9.4
Fortra/Digital Guardiancpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/175956/Fortra-Digital-Guardian-Agent-Uninstaller-Cross-Site-Scripting-UninstallKey-Cached.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2023/Nov/14nvdExploitMailing ListThird Party Advisory
r.sec-consult.com/fortranvdExploitThird Party Advisory
www.fortra.com/securitynvdProduct

News mentions

No linked articles in our index yet.

cvss	0.390
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000