Vulnerability · Published May 12, 2021 · Assigned by trellix

CVE-2021-23892

High 8.2

In plain English

A high-severity security flaw in McAfee Endpoint Security (ENS) for Linux from McAfee,LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.2%top 90.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.

Affected products (as reported)

Vendor	Product	Versions
McAfee,LLC	McAfee Endpoint Security (ENS) for Linux	unspecified – before 10.7.5

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10355 x_refsource_CONFIRM