CVE-2018-6693
Medium
Description
An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.
SeverityMedium
CVSS5.3
Exploit probability—
ProductMcafee Endpoint Security For Linux Threat Prevention
PublishedSep 18, 2018
First seenSep 18, 2018
Weakness typeCWE-363CWE-363CWE-274CWE-274
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee endpoint_security_for_linux_threat_prevention | v ≤ 10.2.3, 10.5.1 | — |
| mcafee endpoint_security_linux_threat_prevention | 10.5.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.