CVE-2021-23892
Assigner: trellix
Published: 2021-05-12T09:05:13
State: PUBLISHED
affected: defaultStatus: unaffected
platforms: Linux
product: McAfee Endpoint Security (ENS) for Linux
vendor: McAfee,LLC
versions: lessThan: 10.7.5
status: affected
version: unspecified
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: <p>By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.</p>
value: By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-59
description: CWE-59: Improper Link Resolution Before File Access ('Link Following')
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9