title: McAfee Agent (MA) for Linux Privilege Escalation vulnerability
description: Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.
problem types: Insecure Temporary File (CWE-377)
affected:
{
platforms: x86
product: McAfee Agent (MA) for Linux
vendor: McAfee
versions:
status: affected, version: 5.5.0
status: affected, version: 5.5.1
lessThan: 5.0.0*, status: affected, version: 5.0.0, versionType: custom
lessThanOrEqual: 5.0.6, status: affected, version: 5.0.6, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:L
version: 3.0
]
solutions: McAfee highly recommends that all customers upgrade to McAfee Agent 5.6.0.