CVE-2018-6706

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

Score

CVSS 3.1 7.5 High

Status

Modified - trellixpsirt@trellix.com

Published

2018-12-12

Last modified

2024-08-05

Weaknesses

CWE-377

Affected products

• Agent (Mcafee)
• Mcafee Agent Ma For Linux (Mcafee)

References

• http://www.securityfocus.com/bid/106328
• https://kc.mcafee.com/corporate/index?page=content&id=SB10260