CVE Vulnerabilities

CVE-2018-6706

Insecure Temporary File

Published: Dec 12, 2018 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

Weakness 

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

Affected Software 

Name Vendor Start Version End Version
Agent Mcafee 5.0.0 (including) 5.0.6 (including)
Agent Mcafee 5.5.0 (including) 5.5.0 (including)
Agent Mcafee 5.5.1 (including) 5.5.1 (including)

References