CVE Vulnerabilities

CVE-2018-6704

Insecure Temporary File

Published: Dec 12, 2018 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

Weakness

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Affected Software

NameVendorStart VersionEnd Version
AgentMcafee5.0.0 (including)5.0.6 (including)
AgentMcafee5.5.0 (including)5.5.0 (including)
AgentMcafee5.5.1 (including)5.5.1 (including)

References