CWE Code: 367
Vulnerability Type: privilege_escalation
CVSS Score: 3.3
CWE Name:  Time-of-check Time-of-use (TOCTOU) Race Condition
Summary: an unprivileged user can delete arbitrary files on a linux system running ensltp 10.5.1, 10.5.0, and 10.2.3 hotfix 1246778 and earlier. by exploiting a time of check to time of use (toctou) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2018-09-18
Last Modified Date: 2019-10-09