| Package | Affected versions | Patched versions |
|---|---|---|
| eda agent | ≤ 10.2.26 | |
| epa agent | ≤ 10.2.26 | |
| epm agent | ≤ 10.2.26 | |
| eua agent | ≤ 10.2.26 | |
| flw agent | ≤ 10.2.26 | |
| sum agent | ≤ 10.2.26 |
An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, and SUM Agent through 10.2.26. The agent executable, when installed for non-root operations (scanning), can be forced to copy files from the filesystem to other locations via Symbolic Link Following.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free