Exploitation of Authorization in TIE Server
CVE-2019-3641

4.5MEDIUM

Key Information:

Vendor

Mcafee,llc

Status
Threat Intelligence Exchange Server (tie Server)
Vendor
CVE Published:
13 November 2019

What is CVE-2019-3641?

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

Affected Version(s)

Threat Intelligence Exchange Server (TIE Server) 3.0.x 3.0.0

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.