CVE-2018-6706: McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-12 · updated 2026-06-17
Weakness: CWE-377

Description

Insecure handling of temporary files in non-Windows McAfee Agent 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows an Unprivileged User to introduce custom paths during agent installation in Linux via unspecified vectors.

Affected products

McAfee,LLC McAfee Agent for Windows: from 5.0.0 through 5.0.6; 5.5.0, 5.5.1

References

http://www.securityfocus.com/bid/106328
https://kc.mcafee.com/corporate/index?page=content&id=SB10260
http://www.securityfocus.com/bid/106328
https://kc.mcafee.com/corporate/index?page=content&id=SB10260

Get alerted when CVE-2018-6706 or the next vulnerability affects your stack