Skip to main content

Agent CVE-2018-6705

HIGH
Insecure Temporary File (CWE-377)
2018-12-12 trellixpsirt@trellix.com
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 12, 2018 - 20:29 nvd
HIGH 7.8

DescriptionNVD

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.

AnalysisAI

Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-377. Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions. Affected products include: Mcafee Agent. Version information: through 5.0.6.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Agent

View all
CVE-2018-6703 CRITICAL
9.8 Dec 11

Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows re

CVE-2022-1257 MEDIUM POC
5.5 Apr 14

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a loca

CVE-2016-3984 MEDIUM POC
5.1 Apr 08

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.

CVE-2021-1257 HIGH
8.8 Jan 20

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remot

CVE-2023-1388 HIGH
8.1 Jun 07

A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macm

CVE-2023-41743 HIGH
7.8 Aug 31

Local privilege escalation due to insecure driver communication port permissions. Rated high severity (CVSS 7.8), this v

CVE-2025-5480 HIGH
7.8 Jun 06

Local privilege escalation vulnerability in Action1 where an attacker with low-privileged code execution can exploit an

CVE-2024-8996 HIGH
7.8 Sep 25

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from L

CVE-2023-44209 HIGH
7.8 Oct 04

Local privilege escalation due to improper soft link handling. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2023-41744 HIGH
7.8 Aug 31

Local privilege escalation due to unrestricted loading of unsigned libraries. Rated high severity (CVSS 7.8), this vulne

CVE-2023-0976 HIGH
7.8 Jun 07

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file

CVE-2023-0975 HIGH
7.8 Apr 03

A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/u

Share

CVE-2018-6705 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy