EUVD-2021-10818

Malware in sbrugna...

CVE-2021-23892

The CVE-2021-23892 issue affects McAfee Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW). A TOCTOU race condition during the installation process allows a local user to escalate privileges by exploiting insecure use of predictable temporary file locations to gain administra...

CVE-2021-23892: Improper Link Resolution Before File Access

By exploiting a time of check to time of use TOCTOU race condition during the Endpoint Security for Linux Threat Prevention and Firewall ENSL TP/FW installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrar...