CVE-2018-6706CWE-377

McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability

Low · published December 12, 2018

CVSS v3.0
2.3
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

The record
Technical detail
CVSS v3.0
2.3 · LOW
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2018-12-12T23:00Z
EPSS history
Timeline
  • 12 DEC 23:00Z
    McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability
    cvelistv5