PT-2021-15594 · Mcafee · Endpoint Security For Linux Threat Prevention/Firewall

Published 2021-05-12 · Updated 2023-02-11 · CVE-2021-23892

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW) (affected versions not specified)

Description: A local user can exploit a time of check to time of use (TOCTOU) race condition during the installation process to perform a privilege escalation attack, obtaining administrator privileges for executing arbitrary code. This is achieved through the insecure use of predictable temporary file locations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Link Following

Weakness Enumeration

CWE-367

CWE-59

Related Identifiers

CVE-2021-23892

Affected Products

Endpoint Security For Linux Threat Prevention/Firewall

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-23892 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23892 · Vendor Advisory
• https://t.me/cvenotify/40221 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10355 · Note