CVE-2021-23892

HIGH

McAfee Endpoint Security for Linux Threat Prevention 10.5.0-10.7.5 - Privilege Escalation via TOCTOU Race Condition

Title source: llm
STIX 2.1

Description

By exploiting a time of check to time of use (TOCTOU) race condition during the Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrary code through insecure use of predictable temporary file locations.

References (1)

Core 1
Core References

Scores

CVSS v3 8.2
EPSS 0.0002
EPSS Percentile 6.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Details

CWE
CWE-367 CWE-59
Status published
Products (1)
mcafee/endpoint_security_for_linux_threat_prevention 10.5.0 - 10.7.5
Published May 12, 2021
Tracked Since Feb 18, 2026