VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-6706

CVE-2018-6706

Description

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

Affected products

5
  • McAfee/Agent4 versions
    cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*range: >=5.0.0,<=5.0.6
    • cpe:2.3:a:mcafee:agent:5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mcafee:agent:5.5.1:*:*:*:*:*:*:*
    • (no CPE)range: 5.0.0 - 5.0.6, 5.5.0, 5.5.1
  • McAfee/McAfee Agent (MA) for Maccpe-rescue
    Range: 5.5.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.