medium5.5
CVE-2019-17445
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26.
Impact
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be forced to copy files from the filesystem to other locations via Symbolic Link Following.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eracent | Eda Agent | through 10.2.26 |
| Eracent | Epa Agent | through 10.2.26 |
| Eracent | Epm Agent | through 10.2.26 |
| Eracent | Eua Agent | through 10.2.26 |
| Eracent | Flw Agent | through 10.2.26 |
| Eracent | Sum Agent | through 10.2.26 |