CVE-2018-6693 describes a time-of-check to time-of-use (TOCTOU) race condition in McAfee Endpoint Security for Linux Threat Prevention (ENSLTP) versions 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. This vulnerability allows an unprivileged local user to achieve privilege escalation, enabling the deletion of arbitrary files on the affected Linux system. The CVSS score is 5.3 (Medium), indicating a local attack vector with high attack complexity, low privileges required, and a high impact on integrity and low impact on availability. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there evidence of active exploitation, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.2.3CPE matchmatch criteria | cpe:2.3:a:mcafee:endpoint_security_for_linux_threat_prevention:*:*:*:*:*:*:*:* | ||
10.5.1CPE matchmatch criteria | cpe:2.3:a:mcafee:endpoint_security_for_linux_threat_prevention:10.5.1:*:*:*:*:*:*:* | ||
10.5.0CPE matchmatch criteria | cpe:2.3:a:mcafee:endpoint_security_linux_threat_prevention:10.5.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.