2.3low
CVE-2018-6705
McAfee Agent (MA) for Linux Privilege Escalation vulnerability
Published 7 y ago · modified 4 mo ago · JSON
CVSS
2.3
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 33%
Public exploits
0
none known
Summary
Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.
Exploit prediction (EPSS)
0.38% probability of exploitation in the next 30 days, higher than 33% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 2.3 | CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 2.3 | CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L |
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- McAfee McAfee Agent (MA) for Linux
Classification
- Weakness
- CWE-377 DEPRECATED: Insecure Temporary File
References
- securityfocus.com /bid/106328 · vdb-entry, x_refsource_BID, x_transferred
- kc.mcafee.com /corporate/index?page=content&id=SB10260 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-6705
- NVD: CVE-2018-6705
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.